Re: Is ssl_crl_file "SSL server cert revocation list"? - Mailing list pgsql-hackers

From Daniel Gustafsson
Subject Re: Is ssl_crl_file "SSL server cert revocation list"?
Date
Msg-id 2682ED31-9949-4B76-A4DE-B7A9708B0B23@yesql.se
Whole thread Raw
In response to Re: Is ssl_crl_file "SSL server cert revocation list"?  (Kyotaro Horiguchi <horikyota.ntt@gmail.com>)
Responses Re: Is ssl_crl_file "SSL server cert revocation list"?
List pgsql-hackers
> On 2 Dec 2021, at 06:07, Kyotaro Horiguchi <horikyota.ntt@gmail.com> wrote:
>
> At Thu, 02 Dec 2021 13:54:41 +0900 (JST), Kyotaro Horiguchi <horikyota.ntt@gmail.com> wrote in
>> As discussed in the thread [1], I find the wording "SSL server
>> certificate revocation list" as misleading or plain wrong.
>
> FWIW, I'm convinced that that's plain wrong after finding some
> occurances of "(SSL) client certificate" in the doc.

I agree with this, the concepts have been a bit muddled.

While in there I noticed that we omitted mentioning sslcrldir in a few cases.
The attached v2 adds these and removes the whitespace changes from your patch
for easier review.

--
Daniel Gustafsson        https://vmware.com/


Attachment

pgsql-hackers by date:

Previous
From: Amit Kapila
Date:
Subject: Re: Non-superuser subscription owners
Next
From: Daniel Gustafsson
Date:
Subject: Re: pgcrypto: Remove explicit hex encoding/decoding from tests