Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ed5fX-0000KU-4d for pgsql-docs@arkaria.postgresql.org; Sun, 21 Jan 2018 02:47:39 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ed5fW-0004Zp-9t for pgsql-docs@arkaria.postgresql.org; Sun, 21 Jan 2018 02:47:38 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1ed5fS-0003tQ-GO for pgsql-docs@lists.postgresql.org; Sun, 21 Jan 2018 02:47:34 +0000 Received: from momjian.us ([72.94.173.45]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1ed5fP-0006Ss-7h for pgsql-docs@postgresql.org; Sun, 21 Jan 2018 02:47:33 +0000 Received: from bruce by momjian.us with local (Exim 4.84_2) (envelope-from ) id 1ed5fN-0002dx-Mb; Sat, 20 Jan 2018 21:47:29 -0500 Date: Sat, 20 Jan 2018 21:47:29 -0500 From: Bruce Momjian To: Michael Paquier Cc: PostgreSQL-documentation , Stephen Frost , David Steele Subject: Re: Correction of intermediate certificate handling Message-ID: <20180121024729.GB10632@momjian.us> References: <20180116002238.GC12724@momjian.us> <20180116053305.GB2212@paquier.xyz> <20180116162122.GB1470@momjian.us> <20180117000950.GB935@paquier.xyz> <20180117032344.GA26285@momjian.us> <20180117082000.GA13673@paquier.xyz> <20180117123442.GB26285@momjian.us> <20180118012503.GB29962@paquier.xyz> <20180118020017.GC19651@momjian.us> <20180118031740.GG29962@paquier.xyz> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20180118031740.GG29962@paquier.xyz> User-Agent: Mutt/1.5.23 (2014-03-12) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On Thu, Jan 18, 2018 at 12:17:40PM +0900, Michael Paquier wrote: > On Wed, Jan 17, 2018 at 09:00:17PM -0500, Bruce Momjian wrote: > > On Thu, Jan 18, 2018 at 10:25:03AM +0900, Michael Paquier wrote: > > > /etc/ssl/openssl.cnf is not available on macos or Windows, which can > > > lead to a bit of confusion as I would imagine that people would > > > copy/paste such commands when testing things. Perhaps it would be worth > > > mentioning that this path is proper to usual Linux distributions (I can > > > see it at least on ArchLinux and Debian), with a reference to this > > > OpenSSL link: > > > https://www.openssl.org/docs/manmaster/man5/config.html > > > > One odd thing about the configuration file is that you don't need to > > modify it, but you do need to specify it for that command. > > > > Fixed patch attached. > > OK, what you are proposing here looks fine to me. That's an > improvement. Applied back through 9.3. Thanks for the review and suggestions. -- Bruce Momjian http://momjian.us EnterpriseDB http://enterprisedb.com + As you are, so once was I. As I am, so you will be. + + Ancient Roman grave inscription +