From: k.p.d.lehre@medisin.uio.no
To: pgsql-interfaces@postgresql.org
Subject: To whom an SSL client crt (postgresql.crt) is issued
Date: Sun, 18 Dec 2005 16:17:06 +0100 (CET)
Message-ID: <3307.129.240.250.35.1134919026.squirrel@webmail.uio.no> (raw)
Server: pg 8.0.4 on Red Hat Enterprise Linux 4.
Client: psql 8.0.4 on WinXP Pro SP2.
I have a (self-signed) root.crt on the server, and a
%APPDATA%\postgresql\postgresql.crt signed by that root.crt on the client.
I am surprised that it does not seem to matter to whom the postgresql.crt
is issued.
What I experience is not really contradictory to the docs: "... a client
certificate will be requested from the client during SSL connection
startup, and it must have been signed by one of the certificates present
in root.crt". The docs do not mention that the client crt has to be issued
to the user trying to log on. Isn't it a point TO WHOM the client crt is
issued? Is this the way it is meant to be?
Thanks, KP
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: k.p.d.lehre@medisin.uio.no
Subject: Re: To whom an SSL client crt (postgresql.crt) is issued
In-Reply-To: <3307.129.240.250.35.1134919026.squirrel@webmail.uio.no>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox