Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bNkTD-0004zo-G4 for pgsql-docs@arkaria.postgresql.org; Thu, 14 Jul 2016 17:30:43 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1bNkTC-0007Dd-Kz for pgsql-docs@arkaria.postgresql.org; Thu, 14 Jul 2016 17:30:42 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1bNkSq-0006pJ-I1 for pgsql-docs@postgresql.org; Thu, 14 Jul 2016 17:30:20 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1bNkSn-0001uF-1G for pgsql-docs@postgresql.org; Thu, 14 Jul 2016 17:30:20 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id u6EHUD7K008041; Thu, 14 Jul 2016 13:30:13 -0400 From: Tom Lane To: srix55@gmail.com cc: pgsql-docs@postgresql.org Subject: Re: hba_conf hostssl clientcert=1 no longer required in 9.4 In-reply-to: <20160713110357.1410.30407@wrigleys.postgresql.org> References: <20160713110357.1410.30407@wrigleys.postgresql.org> Comments: In-reply-to srix55@gmail.com message dated "Wed, 13 Jul 2016 11:03:57 -0000" Date: Thu, 14 Jul 2016 13:30:13 -0400 Message-ID: <8040.1468517413@sss.pgh.pa.us> X-Pg-Spam-Score: -3.2 (---) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-docs Precedence: bulk Sender: pgsql-docs-owner@postgresql.org srix55@gmail.com writes: > The following documentation comment has been logged on the website: > Page: https://www.postgresql.org/docs/9.4/static/ssl-tcp.html > Description: > 17.9.1. Using Client Certificates > (https://www.postgresql.org/docs/9.4/static/ssl-tcp.html) > The first paragraph contains this line "...and set the clientcert parameter > to 1 on the appropriate hostssl line(s) in pg_hba.conf" which isn't right > for 9.4. Hmm, what do you think isn't right about it? ISTM there's an omission here, which is that it'd be useful to mention that clientcert=1 is assumed for the "cert" authentication method. But the text seems okay as far as it goes. regards, tom lane -- Sent via pgsql-docs mailing list (pgsql-docs@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-docs