using CRL(s) with multiple CA(s) issued by different root CA(s)

From: Ansley Peduru <apeduru(at)evertz(dot)com>
To: "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org>
Subject: using CRL(s) with multiple CA(s) issued by different root CA(s)
Date: 2016-07-12 16:44:58
Message-ID: 1468341898159.85040@evertz.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi all,

I am unsure of how CRL works in PostgreSQL 9.3. I have a setup with multiple CA's issued by different root CA's that each may or may not issue a CRL. I am aware that in the postgresql.conf there is ssl_cert_file, and ssl_key_file which contains the unique (server) certificate and key. I am also aware of the ssl_ca_file which contains a file of the concatenated CA's. From the documentation the ssl_crl_file parameter requires a file with concatenated CRL's chained up to a root CA. My setup does not necessarily have the intermediate CA's and/or root CA's as only certain CA's can be trusted. Will an incomplete list of CRL's still work even if we have the issuing CA's used for verification? Also will this only work for a single root CA?

Regards,

Ansley

Browse pgsql-general by date

  From Date Subject
Next Message Miguel Ramos 2016-07-12 18:46:41 Re: pg_restore out of memory
Previous Message Tom Lane 2016-07-12 15:58:13 Re: pg_restore out of memory