Re: Refresh Postgres SSL certs? - Mailing list pgsql-general

From Paul Jungwirth
Subject Re: Refresh Postgres SSL certs?
Date
Msg-id CA+6hpam9jxgkxJ6M3k18muRmGoNM0bbvJvNVjtpxORUX42d=tA@mail.gmail.com
Whole thread Raw
In response to Re: Refresh Postgres SSL certs?  (Martijn van Oosterhout <kleptog@svana.org>)
Responses Re: Refresh Postgres SSL certs?  (Martijn van Oosterhout <kleptog@svana.org>)
List pgsql-general
> Have you read the Debian README?
> /usr/share/doc/postgresql-*/README.Debian.gz

Thank you for pointing me to that file. From
/etc/share/doc/ssl-cert/README it sounds like the old snakeoil cert is
already self-signed, so that's promising. So I take it that psql and
the postgres client library won't object to a self-signed cert. Do
they do any kind of certificate pinning or other caching of the old
cert? Or can I just replace the cert, restart the postgres server, and
be done?

Thanks,
Paul


--
_________________________________
Pulchritudo splendor veritatis.


pgsql-general by date:

Previous
From: Martijn van Oosterhout
Date:
Subject: Re: Refresh Postgres SSL certs?
Next
From: Bruce Momjian
Date:
Subject: Re: Linux vs FreeBSD