| From: | Chapman Flack <chap(at)anastigmatix(dot)net> |
|---|---|
| To: | Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>, Ants Aasma <ants(at)cybertec(dot)at>, Bruce Momjian <bruce(at)momjian(dot)us> |
| Cc: | Andrew Dunstan <andrew(dot)dunstan(at)2ndquadrant(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org> |
| Subject: | Re: what can go in root.crt ? |
| Date: | 2020-06-04 15:21:08 |
| Message-ID: | 5ED91164.3070402@anastigmatix.net |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On 06/04/20 11:04, Laurenz Albe wrote:
> I was referring to the wish to *not* use a self-signed CA certificate,
> but an intermediate certificate as the ultimate authority, based on
> a distrust of the certification authority that your organization says
> you should trust.
Are you aware of any principled reason it should be impossible to
include an end-entity certificate in the trust store used by a client?
Are you aware of any principled reason it should be impossible to
include a certificate that has the CA:TRUE and Certificate Sign bits
in the trust store used by a client, whether it is its own signer
or has been signed by another CA?
Regards,
-Chap
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Avinash Kumar | 2020-06-04 15:23:03 | Re: Just for fun: Postgres 20? |
| Previous Message | Juan Fuentes | 2020-06-04 15:20:43 | Re: Possible bug on Postgres 12 (CASE THEN evaluated prematurely) - Change of behaviour compared to 11, 10, 9 |