pg.ddx.io  pgsql-docs@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: srix55@gmail.com
Cc: pgsql-docs@postgresql.org
Subject: Re: hba_conf hostssl clientcert=1 no longer required in 9.4
Date: Thu, 14 Jul 2016 13:30:13 -0400
Message-ID: <8040.1468517413@sss.pgh.pa.us> (raw)
In-Reply-To: <20160713110357.1410.30407@wrigleys.postgresql.org>
References: <20160713110357.1410.30407@wrigleys.postgresql.org>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-docs>

srix55@gmail.com writes:
> The following documentation comment has been logged on the website:
> Page: https://www.postgresql.org/docs/9.4/static/ssl-tcp.html
> Description:

> 17.9.1. Using Client Certificates
> (https://www.postgresql.org/docs/9.4/static/ssl-tcp.html)

> The first paragraph contains this line &quot;...and set the clientcert parameter
> to 1 on the appropriate hostssl line(s) in pg_hba.conf&quot; which isn&#39;t right
> for 9.4.

Hmm, what do you think isn't right about it?

ISTM there's an omission here, which is that it'd be useful to mention
that clientcert=1 is assumed for the "cert" authentication method.  But
the text seems okay as far as it goes.

			regards, tom lane


-- 
Sent via pgsql-docs mailing list (pgsql-docs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-docs



view thread (6+ messages)  latest in thread

Message-ID: <8040.1468517413@sss.pgh.pa.us>
Permalink:  ../8040.1468517413@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/8040.1468517413@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-docs@postgresql.org
  Cc: tgl@sss.pgh.pa.us, srix55@gmail.com
  Subject: Re: hba_conf hostssl clientcert=1 no longer required in 9.4
  In-Reply-To: <8040.1468517413@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox