Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11 - Mailing list pgsql-general

From Kyotaro Horiguchi
Subject Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11
Date
Msg-id 20211201.143816.622010439185603234.horikyota.ntt@gmail.com
Whole thread Raw
In response to ssl_crl_file Certificate Revocation List doesn't work for postgresql 11  (Yi Sun <yinan81@gmail.com>)
Responses Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11  (Yi Sun <yinan81@gmail.com>)
List pgsql-general
At Tue, 30 Nov 2021 21:53:06 +0800, Yi Sun <yinan81@gmail.com> wrote in 
> # cat /home/sunyi/tls/root.crt /home/sunyi/tls/1/root.crl > /tmp/test_1.pem
> # openssl verify -extended_crl -verbose -CAfile /tmp/test_1.pem -crl_check
> /home/sunyi/tls/1/server.crt

I guess what you really wanted to revoke was not server.crt but
postgresql.crt.

regards.

-- 
Kyotaro Horiguchi
NTT Open Source Software Center



pgsql-general by date:

Previous
From: Garfield Lewis
Date:
Subject: Re: [EXT] Re: XQuery/XPath 2.0+ support
Next
From: Pavel Stehule
Date:
Subject: Re: [EXT] Re: XQuery/XPath 2.0+ support