Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1XKFfj-0003O3-8o for pgsql-hackers@arkaria.postgresql.org; Wed, 20 Aug 2014 23:52:07 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1XKFfi-00026p-FF for pgsql-hackers@arkaria.postgresql.org; Wed, 20 Aug 2014 23:52:06 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1XKFfg-00026U-UH for pgsql-hackers@postgreSQL.org; Wed, 20 Aug 2014 23:52:05 +0000 Received: from momjian.us ([72.94.173.45]) by makus.postgresql.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:256) (Exim 4.80) (envelope-from ) id 1XKFfd-0002Fx-GG for pgsql-hackers@postgreSQL.org; Wed, 20 Aug 2014 23:52:03 +0000 Received: from bruce by momjian.us with local (Exim 4.72) (envelope-from ) id 1XKFfa-0004Ez-CC; Wed, 20 Aug 2014 19:51:58 -0400 Date: Wed, 20 Aug 2014 19:51:58 -0400 From: Bruce Momjian To: Stephen Frost Cc: Heikki Linnakangas , Andres Freund , PostgreSQL-development Subject: Re: PQgetssl() and alternative SSL implementations Message-ID: <20140820235158.GG17822@momjian.us> References: <53F1E989.8020609@vmware.com> <20140819144841.GA16422@tamriel.snowman.net> <20140819145547.GB30525@awork2.anarazel.de> <20140819150507.GB16422@tamriel.snowman.net> <20140819152613.GC30525@awork2.anarazel.de> <20140819155237.GE16422@tamriel.snowman.net> <53F37B7E.30300@vmware.com> <20140819192656.GL16422@tamriel.snowman.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20140819192656.GL16422@tamriel.snowman.net> User-Agent: Mutt/1.5.20 (2009-06-14) X-Pg-Spam-Score: -2.6 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org On Tue, Aug 19, 2014 at 03:26:56PM -0400, Stephen Frost wrote: > I think there's been some improvement since I last had to go through the > pain of setting this all up, and some of it is undoubtably OpenSSL's > fault, but there's definitely quite a bit more we could be doing to make > SSL support easier. I'm hopeful that I'll be able to spend more time on > this in the future but it's not a priority currently. I know I updated the docs on this in 2013: commit fa4add50c4ea97c48881fa8cb3863df80141643c Author: Bruce Momjian Date: Fri Dec 6 09:42:08 2013 -0500 docs: clarify SSL certificate authority chain docs Previously, the requirements of how intermediate certificates were handled and their chain to root certificates was unclear. -- Bruce Momjian http://momjian.us EnterpriseDB http://enterprisedb.com + Everyone has their own god. + -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers