Re: BUG #3809: SSL "unsafe" private key permissions bug

Added to TODO:

* Allow SSL key file permission checks to be optionally disabled when
sharing SSL keys with other applications

http://archives.postgresql.org/pgsql-bugs/2007-12/msg00069.php

---------------------------------------------------------------------------

Simon Arlott wrote:
>
> The following bug has been logged online:
>
> Bug reference: 3809
> Logged by: Simon Arlott
> Email address: postgresql(dot)simon(at)arlott(dot)org
> PostgreSQL version: 8.2.4
> Operating system: Linux 2.6.23
> Description: SSL "unsafe" private key permissions bug
> Details:
>
> FATAL: unsafe permissions on private key file "server.key"
> DETAIL: File must be owned by the database user and must have no
> permissions for "group" or "other".
>
> It should be possible to disable this check in the configuration, so those
> of us capable of deciding what's unsafe can do so.
>
> ---------------------------(end of broadcast)---------------------------
> TIP 9: In versions below 8.0, the planner will ignore your desire to
> choose an index scan if your joining column's datatypes do not
> match

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://postgres.enterprisedb.com

+ If your life is a hard drive, Christ can be your backup. +