SSL string

From: PG Doc comments form <noreply(at)postgresql(dot)org>
To: pgsql-docs(at)lists(dot)postgresql(dot)org
Cc: jedele(at)hotmail(dot)com
Subject: SSL string
Date: 2019-04-20 02:02:08
Message-ID: 155572572828.1369.12462908524968666002@wrigleys.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-docs

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/11/ssl-tcp.html
Description:

In Section 18.9, the example showing how to create an SSL certificate:

openssl req -new -x509 -days 365 -nodes -text -out server.crt \
-keyout server.key -subj "/CN=dbhost.yourdomain.com"

Generating a RSA private key
..............................+++++
..............................................................................................+++++
writing new private key to 'server.key'
-----
name is expected to be in the format /type0=value0/type1=value1/type2=...
where characters may be escaped by \. This name is not in that format:
'/CN=dbhost.yourdomain.com'
problems making Certificate Request

A little research showed me I had to add a /C=<2 character country
name>/L=<location>/ST=<state>/O=<organization>/OU=<organization unit> to the

'/CN=dbhost.yourdomain.com' string. I also discovered that the /C=<country
name> had to be 2 characters.

jim

Responses

Browse pgsql-docs by date

  From Date Subject
Next Message Bruce Momjian 2019-04-20 13:09:02 Re: SSL string
Previous Message Michael Paquier 2019-04-19 02:36:54 Re: Minor correction in the doc for non-exclusive pg_start_backup and pg_stop_backup