MIME-Version: 1.0
In-Reply-To: <4DC5895A.5050207@kerneljack.com>
References: <4DC575F6.4060508@kerneljack.com>
	<BANLkTim+=1zT5=4y-ymjAyREvZ5LBX0Fcw@mail.gmail.com>
	<4DC5895A.5050207@kerneljack.com>
Date: Sat, 7 May 2011 20:09:21 +0200
Message-ID: <BANLkTi=YF0_kPCsCnin-op+y-91yzv9BBQ@mail.gmail.com>
Subject: Re: Error in SSL config documentation?
From: Magnus Hagander <magnus@hagander.net>
To: Khusro Jaleel <mailing-lists@kerneljack.com>
Cc: pgsql-docs@postgresql.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Sat, May 7, 2011 at 20:03, Khusro Jaleel
<mailing-lists@kerneljack.com> wrote:
> On 07/05/11 18:46, Magnus Hagander wrote:
>
>> clientcert=3D1 makes the server request a client certificate - but does
>> not use it for authentication. So the client just has to present *any
>> valid* client certificate, and can then use whatever other
>> authenticaiton method is specified (md5, ldap, etc).
>
> Ah, I see now. When you wrote "clientcert=3D1" above, that made me realis=
e
> that I was making a mistake. I was using "clientcert" in the authenticati=
on
> method column, and you can't use it there because it's an "option" to "an=
y
> other auth method" and not a auth method on its own.
>
> I did read the doc and this was not clear to me at first, so perhaps it
> could be made clearer?

Probalby, if you got confused. Do you have a suggestion for a better wordin=
g?

--=20
=A0Magnus Hagander
=A0Me: http://www.hagander.net/
=A0Work: http://www.redpill-linpro.com/