Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l1lxT-0000aj-Hy for pgsql-hackers@arkaria.postgresql.org; Tue, 19 Jan 2021 08:01:47 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l1lxS-0007UE-0Y for pgsql-hackers@arkaria.postgresql.org; Tue, 19 Jan 2021 08:01:46 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l1lxR-0007U7-5y for pgsql-hackers@lists.postgresql.org; Tue, 19 Jan 2021 08:01:45 +0000 Received: from forward1-smtp.messagingengine.com ([66.111.4.223]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l1lxM-0003B4-1t for pgsql-hackers@postgresql.org; Tue, 19 Jan 2021 08:01:44 +0000 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailforward.nyi.internal (Postfix) with ESMTP id D25A819525D5; Tue, 19 Jan 2021 03:01:37 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Tue, 19 Jan 2021 03:01:37 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=nsPnZkitWf/fgnSvZIisicWNFtbP+7+rrCtZ+gMc+ SY=; b=ggUF+KH8OFLnLtFNuNf3GRpkd62N9uDPidLMoeNFm8Y28GbAy46LLfK5r YMLngPiDAfggXbuM1dCi7/74u5vN+O7CUsOV+jFc/UbEtbWMejQgvVAXzhk1v4Ak omuPYz1FUkID1OUi83SNm4Z2fNd2G+/J53M1AAW/P123Lq5r359fplNAbKg61VV5 YNnZ/HWl8tnhQ7dv/hwMnePqEJYmf1G6Xwt4K7kgwhz+hNPfCNwMyUiyRsPGdouR 1I5TIL71M0ZV4di3Tr0B9bv1FNyUI68fOfBMblwcpsIuMslXG0ikGlCCPfdrPI4v eOMasjSwc8P5kBP0DZi1VUKr2GPLg== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrtdelgdduudegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefuvfhfhfhokffffgggjggtgfesth ejredttdefjeenucfhrhhomheprfgvthgvrhcugfhishgvnhhtrhgruhhtuceophgvthgv rhdrvghishgvnhhtrhgruhhtsegvnhhtvghrphhrihhsvggusgdrtghomheqnecuggftrf grthhtvghrnhepheehieejgfevhfdvheelkeeuvefhheehvdehtefghfetfeeggefgveej jeffgfdvnecukfhppeekjedrudejjedrjedvrddugedvnecuvehluhhsthgvrhfuihiivg eptdenucfrrghrrghmpehmrghilhhfrhhomhepphgvthgvrhdrvghishgvnhhtrhgruhht segvnhhtvghrphhrihhsvggusgdrtghomh X-ME-Proxy: Received: from april.pezone.net (p57b1488e.dip0.t-ipconnect.de [87.177.72.142]) by mail.messagingengine.com (Postfix) with ESMTPA id A0E94108005F; Tue, 19 Jan 2021 03:01:36 -0500 (EST) Subject: Re: Is it worth accepting multiple CRLs? To: Kyotaro Horiguchi References: <20200818.164347.563741043271525282.horikyota.ntt@gmail.com> <20200831.180302.1762036380359974457.horikyota.ntt@gmail.com> <591fd449-f475-c2f1-0606-b2a47887c23f@enterprisedb.com> <20210119.091734.2050908166228453830.horikyota.ntt@gmail.com> Cc: sfrost@snowman.net, pgsql-hackers@postgresql.org From: Peter Eisentraut Organization: EnterpriseDB Message-ID: Date: Tue, 19 Jan 2021 09:01:35 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <20210119.091734.2050908166228453830.horikyota.ntt@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On 2021-01-19 01:17, Kyotaro Horiguchi wrote: > Thank you for the information. The only reason for sharing the same > variable for both file and directory is to avoid additional variable > only for this reason. I'll post a new version where new GUC > ssl_crl_path is added. Okay, I look forward to that patch. > By the way we can do the same thing on CA file/dir, but I personally > think that the benefit from the specify-by-directory for CA files is > far less than CRL files. So I'm not going to do this for CA files for > now. Yeah, that seems not so commonly used.