Re: SSL cleanups/hostname verification - Mailing list pgsql-hackers

From Magnus Hagander
Subject Re: SSL cleanups/hostname verification
Date
Msg-id 48FCEEF6.8000502@hagander.net
Whole thread Raw
In response to Re: SSL cleanups/hostname verification  ("Robert Haas" <robertmhaas@gmail.com>)
Responses Re: SSL cleanups/hostname verification
List pgsql-hackers
Robert Haas wrote:
>>> How can you make that the default?  Won't it immediately break every
>>> installation without certificates?
>> *all* SSL installations have certificate on the server side. You cannot
>> run without it.
> 
> s/without certificates/with self-signed certificates/
> 
> which I would guess to be a common configuration

Self-signed still work. In a self-signed scenario, the server
certificate *is* the CA certificate.

//Magnus



pgsql-hackers by date:

Previous
From: Alvaro Herrera
Date:
Subject: Debian no longer dumps cores?
Next
From: Simon Riggs
Date:
Subject: Re: [GENERAL] Hot Standby utility and administrator functions