Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cOnTp-00016U-B8 for pgsql-hackers@arkaria.postgresql.org; Wed, 04 Jan 2017 15:27:57 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1cOnTo-00065S-Pt for pgsql-hackers@arkaria.postgresql.org; Wed, 04 Jan 2017 15:27:56 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1cOnSP-0004VD-6Y for pgsql-hackers@postgresql.org; Wed, 04 Jan 2017 15:26:29 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1cOnSM-00074I-76 for pgsql-hackers@postgresql.org; Wed, 04 Jan 2017 15:26:28 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id v04FQJIY022645; Wed, 4 Jan 2017 10:26:19 -0500 From: Tom Lane To: Andreas Karlsson cc: Stephen Frost , Magnus Hagander , Peter Eisentraut , Michael Paquier , Michael Banck , Peter Geoghegan , PostgreSQL-development Subject: Re: [PATCH] Reload SSL certificates on SIGHUP In-reply-to: <1254e97b-a65a-5a63-e938-810507a16d71@proxel.se> References: <05677cd3-63b2-b15b-7afd-798e34e607c7@proxel.se> <16e282a4-2573-f629-09e8-e6b0ac615890@2ndquadrant.com> <29982.1483412575@sss.pgh.pa.us> <23913.1483458895@sss.pgh.pa.us> <20995.1483541230@sss.pgh.pa.us> <7fca80da-0274-3f36-eb25-d53f940c1977@proxel.se> <20170104151429.GP18360@tamriel.snowman.net> <1254e97b-a65a-5a63-e938-810507a16d71@proxel.se> Comments: In-reply-to Andreas Karlsson message dated "Wed, 04 Jan 2017 16:17:49 +0100" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <22643.1483543579.1@sss.pgh.pa.us> Date: Wed, 04 Jan 2017 10:26:19 -0500 Message-ID: <22644.1483543579@sss.pgh.pa.us> X-Pg-Spam-Score: -5.1 (-----) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org Andreas Karlsson writes: > Sorry, I was very unclear. I meant refusing the reload the SSL context > if there is a pass phrase, but that the rest of the config will be > reloaded just fine. This will lead to some log spam on every SIGHUP for > people with a pass phrase but should otherwise work as before. How will you know whether there's a pass phrase? regards, tom lane -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers