Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1phAJM-0004Hp-VK for pgsql-docs@arkaria.postgresql.org; Tue, 28 Mar 2023 14:28:32 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1phAJL-0000Dn-Ju for pgsql-docs@arkaria.postgresql.org; Tue, 28 Mar 2023 14:28:31 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1phAJL-0000Cg-Bi for pgsql-docs@lists.postgresql.org; Tue, 28 Mar 2023 14:28:31 +0000 Received: from wnew1-smtp.messagingengine.com ([64.147.123.26]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1phAJI-0007P4-EC for pgsql-docs@lists.postgresql.org; Tue, 28 Mar 2023 14:28:30 +0000 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailnew.west.internal (Postfix) with ESMTP id EE7162B066B8; Tue, 28 Mar 2023 10:28:25 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Tue, 28 Mar 2023 10:28:26 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t=1680013705; x= 1680020905; bh=jeOSYvepGgA9p9yNgeZeqsA9czJYI4gCgvN9FeDod98=; b=D dlXlMcWz0BcRgXB/s6KhLXb4YM7nkbAdK6nz1yp7IpLJUqhsCvIOVN0lcaVpP1qS eorgJG/pIddOSBUdVciDByohSGtBrcYOxTM38DCl9vzdm0I2ttz8MX/AFwrB7MLV 93K/0waAqxSoLhM/CNnUGLQqvIsGb5nLRAP0Pvk6Qmt6Uzn33bK11T5bqUXM3MLA ec0Dqy9zHm/D/IEx6Ars79HNwtRtcBVjFqEisG6fkE+jpx9/v44vynlqDuPJhIRV UGZXew0ePqaTHqo56I6dZqygRAsk0aGajgBdkUdMO5e10Dxp8GiQUEHXDiWBSYfg dZ0LCxC4lli4viqNFeJKA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvhedrvdehgedgjeejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepkfffgggfuffvfhfhjggtgfesthekredttdefjeenucfhrhhomheprfgvthgv rhcugfhishgvnhhtrhgruhhtuceophgvthgvrhdrvghishgvnhhtrhgruhhtsegvnhhtvg hrphhrihhsvggusgdrtghomheqnecuggftrfgrthhtvghrnheplefgteefiedtleelgeeg jeevhfeuteefvddtjeehveeuieefgedvhfeuleduteeunecuvehluhhsthgvrhfuihiivg eptdenucfrrghrrghmpehmrghilhhfrhhomhepphgvthgvrhdrvghishgvnhhtrhgruhht segvnhhtvghrphhrihhsvggusgdrtghomh X-ME-Proxy: Feedback-ID: i131946ab:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 28 Mar 2023 10:28:24 -0400 (EDT) Message-ID: Date: Tue, 28 Mar 2023 16:28:24 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.9.0 Subject: Re: Certificate authentication docs in multiple places Content-Language: en-US To: Steve Atkins , pgsql-docs@lists.postgresql.org References: From: Peter Eisentraut In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 23.03.23 14:33, Steve Atkins wrote: > A couple of times recently I’ve been chatting with someone about using certificate authentication, and the docs they’ve found on it are the ones in section 21.12 (Client Authentication -> Certificate Authentication). > > But the useful documentation about how to set it up and use it is in section 19.9.3 (Secure TCP/IP Connections with SSL -> Using Client Certificates), where you’re less likely to find it while thinking about authentication. > > Should we add a link from the former to the latter? Sure, some cross-linking between those two sections seems sensible.