Re: "cert" + clientcert=verify-ca in pg_hba.conf?

On Mon, Oct 5, 2020 at 10:25:08AM +0900, Kyotaro Horiguchi wrote:
> > > >From 2978479ada887284eae0ed36c8acf29f1a002feb Mon Sep 17 00:00:00 2001
> > > From: Kyotaro Horiguchi <horikyoga(dot)ntt(at)gmail(dot)com>
> > > Date: Tue, 21 Jul 2020 23:01:27 +0900
> > > Subject: [PATCH v2] Allow directory name for GUC ssl_crl_file and connection
> > > option sslcrl
> > >
> > > X509_STORE_load_locations accepts a directory, which leads to
> > > on-demand loading method with which method only relevant CRLs are
> > > loaded.
> >
> > Uh, I think this CRL patch is the wrong patch. This thread is about the
> > clientcert=verify-ca in pg_hba.conf. I will use the patch I developed
> > and posted on Tue, 1 Sep 2020 11:47:34 -0400 in this thread.
>
> Mmmm. Sorry for the silly mistake. I'm confused with another one.
>
> FWIW, the cause is a rewording of "cannot" to "can not". This is the
> right one.

Yes, that is the version I was going to apply. I will do it today.
Thanks.

--
Bruce Momjian <bruce(at)momjian(dot)us> https://momjian.us
EnterpriseDB https://enterprisedb.com

The usefulness of a cup is in its emptiness, Bruce Lee