Re: BUG #3809: SSL "unsafe" private key permissions bug

From: Simon Arlott <simon(at)arlott(dot)org>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #3809: SSL "unsafe" private key permissions bug
Date: 2007-12-08 15:41:16
Message-ID: 475ABB1C.3070809@simon.arlott.org.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On 08/12/07 15:31, Tom Lane wrote:
> "Simon Arlott" <postgresql(dot)simon(at)arlott(dot)org> writes:
>> FATAL: unsafe permissions on private key file "server.key"
>> DETAIL: File must be owned by the database user and must have no
>> permissions for "group" or "other".
>
>> It should be possible to disable this check in the configuration, so those
>> of us capable of deciding what's unsafe can do so.
>
> You haven't given any reason to think that you are smarter than this
> check.

The directory containing the SSL keys has appropriate permissions, I
shouldn't have to make a separate copy of them for every application.

> regards, tom lane

--
Simon Arlott

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message A. Ozen Akyurek 2007-12-08 21:04:40 OleDB and Delphi
Previous Message Tom Lane 2007-12-08 15:31:30 Re: BUG #3809: SSL "unsafe" private key permissions bug