pg.ddx.io pgsql-docs@postgresql.org mailing list archive
help / color / mirror / Atom feedCertificate authentication docs in multiple places
7+ messages / 4 participants
[nested] [flat]
* Certificate authentication docs in multiple places
@ 2023-03-23 13:33 Steve Atkins <steve@blighty.com>
0 siblings, 1 reply; 7+ messages in thread
From: Steve Atkins @ 2023-03-23 13:33 UTC (permalink / raw)
To: pgsql-docs@lists.postgresql.org
A couple of times recently I’ve been chatting with someone about using certificate authentication, and the docs they’ve found on it are the ones in section 21.12 (Client Authentication -> Certificate Authentication).
But the useful documentation about how to set it up and use it is in section 19.9.3 (Secure TCP/IP Connections with SSL -> Using Client Certificates), where you’re less likely to find it while thinking about authentication.
Should we add a link from the former to the latter?
Cheers,
Steve
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Certificate authentication docs in multiple places
@ 2023-03-28 14:28 Peter Eisentraut <peter.eisentraut@enterprisedb.com>
parent: Steve Atkins <steve@blighty.com>
0 siblings, 2 replies; 7+ messages in thread
From: Peter Eisentraut @ 2023-03-28 14:28 UTC (permalink / raw)
To: Steve Atkins <steve@blighty.com>; pgsql-docs@lists.postgresql.org
On 23.03.23 14:33, Steve Atkins wrote:
> A couple of times recently I’ve been chatting with someone about using certificate authentication, and the docs they’ve found on it are the ones in section 21.12 (Client Authentication -> Certificate Authentication).
>
> But the useful documentation about how to set it up and use it is in section 19.9.3 (Secure TCP/IP Connections with SSL -> Using Client Certificates), where you’re less likely to find it while thinking about authentication.
>
> Should we add a link from the former to the latter?
Sure, some cross-linking between those two sections seems sensible.
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Certificate authentication docs in multiple places
@ 2023-04-10 07:56 Michael Paquier <michael@paquier.xyz>
parent: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
1 sibling, 1 reply; 7+ messages in thread
From: Michael Paquier @ 2023-04-10 07:56 UTC (permalink / raw)
To: Peter Eisentraut <peter.eisentraut@enterprisedb.com>; +Cc: Steve Atkins <steve@blighty.com>; pgsql-docs@lists.postgresql.org
On Tue, Mar 28, 2023 at 04:28:24PM +0200, Peter Eisentraut wrote:
> Sure, some cross-linking between those two sections seems sensible.
Steve, would you like to propose a patch?
--
Michael
Attachments:
[application/pgp-signature] signature.asc (832B, ../../ZDPBN0O%2FlFs2vxG8@paquier.xyz/2-signature.asc)
download
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Certificate authentication docs in multiple places
@ 2023-04-10 08:47 Steve Atkins <steve@blighty.com>
parent: Michael Paquier <michael@paquier.xyz>
0 siblings, 1 reply; 7+ messages in thread
From: Steve Atkins @ 2023-04-10 08:47 UTC (permalink / raw)
To: Michael Paquier <michael@paquier.xyz>; +Cc: Peter Eisentraut <peter.eisentraut@enterprisedb.com>; pgsql-docs@lists.postgresql.org
> On 10 Apr 2023, at 08:56, Michael Paquier <michael@paquier.xyz> wrote:
>
> On Tue, Mar 28, 2023 at 04:28:24PM +0200, Peter Eisentraut wrote:
>> Sure, some cross-linking between those two sections seems sensible.
>
> Steve, would you like to propose a patch?
Yes, I’ll do that once I get some time to get the doc toolchain working.
Cheers,
Steve
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Certificate authentication docs in multiple places
@ 2023-04-12 00:28 Michael Paquier <michael@paquier.xyz>
parent: Steve Atkins <steve@blighty.com>
0 siblings, 0 replies; 7+ messages in thread
From: Michael Paquier @ 2023-04-12 00:28 UTC (permalink / raw)
To: Steve Atkins <steve@blighty.com>; +Cc: Peter Eisentraut <peter.eisentraut@enterprisedb.com>; pgsql-docs@lists.postgresql.org
On Mon, Apr 10, 2023 at 09:47:08AM +0100, Steve Atkins wrote:
> Yes, I’ll do that once I get some time to get the doc toolchain working.
Well, if you don't want to spend time setting up a toolchain, feel
free to send a patch just hacking the SGML files. I am OK to take it
from there, as long as the idea behind the patch is clear.
--
Michael
Attachments:
[application/pgp-signature] signature.asc (832B, ../../ZDX7E8o5E6sokOo1@paquier.xyz/2-signature.asc)
download
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Certificate authentication docs in multiple places
@ 2023-09-27 21:28 Bruce Momjian <bruce@momjian.us>
parent: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
1 sibling, 1 reply; 7+ messages in thread
From: Bruce Momjian @ 2023-09-27 21:28 UTC (permalink / raw)
To: Peter Eisentraut <peter.eisentraut@enterprisedb.com>; +Cc: Steve Atkins <steve@blighty.com>; pgsql-docs@lists.postgresql.org
On Tue, Mar 28, 2023 at 04:28:24PM +0200, Peter Eisentraut wrote:
> On 23.03.23 14:33, Steve Atkins wrote:
> > A couple of times recently I’ve been chatting with someone about using certificate authentication, and the docs they’ve found on it are the ones in section 21.12 (Client Authentication -> Certificate Authentication).
> >
> > But the useful documentation about how to set it up and use it is in section 19.9.3 (Secure TCP/IP Connections with SSL -> Using Client Certificates), where you’re less likely to find it while thinking about authentication.
> >
> > Should we add a link from the former to the latter?
>
> Sure, some cross-linking between those two sections seems sensible.
Attached is a patch which accomplishes this.
--
Bruce Momjian <bruce@momjian.us> https://momjian.us
EDB https://enterprisedb.com
Only you can decide what is important to you.
Attachments:
[text/x-diff] cert.diff (819B, ../../ZRSeZH1Ytkm3Dj7v@momjian.us/2-cert.diff)
download | inline diff:
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index a72f80f033..82bfd25fd1 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -2165,7 +2165,8 @@ host ... radius radiusservers="server1,server2" radiussecrets="""secret one"",""
<para>
This authentication method uses SSL client certificates to perform
- authentication. It is therefore only available for SSL connections.
+ authentication. It is therefore only available for SSL connections;
+ see <xref linkend="ssl-openssl-config"/> for SSL configuration instructions.
When using this authentication method, the server will require that
the client provide a valid, trusted certificate. No password prompt
will be sent to the client. The <literal>cn</literal> (Common Name)
^ permalink raw reply [nested|flat] 7+ messages in thread
* Re: Certificate authentication docs in multiple places
@ 2023-10-10 19:54 Bruce Momjian <bruce@momjian.us>
parent: Bruce Momjian <bruce@momjian.us>
0 siblings, 0 replies; 7+ messages in thread
From: Bruce Momjian @ 2023-10-10 19:54 UTC (permalink / raw)
To: Peter Eisentraut <peter.eisentraut@enterprisedb.com>; +Cc: Steve Atkins <steve@blighty.com>; pgsql-docs@lists.postgresql.org
On Wed, Sep 27, 2023 at 05:28:04PM -0400, Bruce Momjian wrote:
> On Tue, Mar 28, 2023 at 04:28:24PM +0200, Peter Eisentraut wrote:
> > On 23.03.23 14:33, Steve Atkins wrote:
> > > A couple of times recently I’ve been chatting with someone about using certificate authentication, and the docs they’ve found on it are the ones in section 21.12 (Client Authentication -> Certificate Authentication).
> > >
> > > But the useful documentation about how to set it up and use it is in section 19.9.3 (Secure TCP/IP Connections with SSL -> Using Client Certificates), where you’re less likely to find it while thinking about authentication.
> > >
> > > Should we add a link from the former to the latter?
> >
> > Sure, some cross-linking between those two sections seems sensible.
>
> Attached is a patch which accomplishes this.
Patch applied back to PG 11.
--
Bruce Momjian <bruce@momjian.us> https://momjian.us
EDB https://enterprisedb.com
Only you can decide what is important to you.
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2023-10-10 19:54 UTC | newest]
Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2023-03-23 13:33 Certificate authentication docs in multiple places Steve Atkins <steve@blighty.com>
2023-03-28 14:28 ` Peter Eisentraut <peter.eisentraut@enterprisedb.com>
2023-04-10 07:56 ` Michael Paquier <michael@paquier.xyz>
2023-04-10 08:47 ` Steve Atkins <steve@blighty.com>
2023-04-12 00:28 ` Michael Paquier <michael@paquier.xyz>
2023-09-27 21:28 ` Bruce Momjian <bruce@momjian.us>
2023-10-10 19:54 ` Bruce Momjian <bruce@momjian.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox