Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11

From: Kyotaro Horiguchi <horikyota(dot)ntt(at)gmail(dot)com>
To: yinan81(at)gmail(dot)com
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11
Date: 2021-12-01 05:38:16
Message-ID: 20211201.143816.622010439185603234.horikyota.ntt@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

At Tue, 30 Nov 2021 21:53:06 +0800, Yi Sun <yinan81(at)gmail(dot)com> wrote in
> # cat /home/sunyi/tls/root.crt /home/sunyi/tls/1/root.crl > /tmp/test_1.pem
> # openssl verify -extended_crl -verbose -CAfile /tmp/test_1.pem -crl_check
> /home/sunyi/tls/1/server.crt

I guess what you really wanted to revoke was not server.crt but
postgresql.crt.

regards.

--
Kyotaro Horiguchi
NTT Open Source Software Center

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Pavel Stehule 2021-12-01 05:44:10 Re: [EXT] Re: XQuery/XPath 2.0+ support
Previous Message Garfield Lewis 2021-12-01 05:28:06 Re: [EXT] Re: XQuery/XPath 2.0+ support