Re: libpq: system-wide root.crt - Mailing list pgsql-bugs

From Magnus Hagander
Subject Re: libpq: system-wide root.crt
Date
Msg-id AANLkTikjaJJVfCBR8vY5GhQQcwiuTwZu8SX=Moq_dTHb@mail.gmail.com
Whole thread Raw
In response to Re: libpq: system-wide root.crt  (Martin Pitt <mpitt@debian.org>)
Responses Re: libpq: system-wide root.crt  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: libpq: system-wide root.crt  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-bugs
On Thu, Aug 19, 2010 at 23:11, Martin Pitt <mpitt@debian.org> wrote:
> Hello PostgreSQL developers,
>
> Martin Pitt [2010-08-17 =A06:49 +0200]:
>> I received a request to support system-wide root certificates in
>> libpq. Right now it only looks in ~/.postgresql/root.crt, but since
>> such certificates are usually set up system wide and be maintained by
>> the sysadmins, it would be very convenient if there was a fallback
>> lookup in /etc/postgresql/ or similar.
>
> Patch attached against current git head. I tested it with both the
> default case (new option not specified), as well as with
> --with-ssl-root-cert-dir=3D/etc/postgresql-common, and confirm that in
> the latter case root.crt gets picked up from
> /etc/postgresql-common/ if it's not in ~/.postgresql/.

I wonder if we want to have a default value for this rather than
disabling it when it's not specified by configure. But is there any
kind of reasonable default that's not going to be
platform/distribution specific?

--=20
=A0Magnus Hagander
=A0Me: http://www.hagander.net/
=A0Work: http://www.redpill-linpro.com/

pgsql-bugs by date:

Previous
From: Tom Lane
Date:
Subject: Re: BUG #5669: server process was terminated by exception 0xC0000005
Next
From: TamilSelvam M
Date:
Subject: Postgresql installation on P2020 board