rdelaage/postgresql
1
0
Fork 0
mirror of https://git.postgresql.org/git/postgresql.git synced 2024-10-04 20:36:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Doc: Fix misleading wording of CRL parameters

Browse Source 
ssl_crl_file and ssl_crl_dir are both used to for client certificate
revocation, not server certificates.  The description for the params
could be easily misread to mean the opposite however,  as evidenced
by the bugreport leading to this fix.  Similarly, expand sslcrl and
and sslcrldir to explicitly mention server certificates. While there
also mention sslcrldir where previously only sslcrl was discussed.

Backpatch down to v10, with the CRL dir fixes down to 14 where they
were introduced.

Author: Kyotaro Horiguchi <horikyota.ntt@gmail.com>
Reviewed-by: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
Discussion: https://postgr.es/m/20211202.135441.590555657708629486.horikyota.ntt@gmail.com
Discussion: https://postgr.es/m/CABWY_HCBUCjY1EJHrEGePGEaSZ5b29apgTohCyygtsqe_ySYng@mail.gmail.com
Backpatch-through: 10
This commit is contained in:
Daniel Gustafsson 2021-12-03 14:15:50 +01:00
parent 82d1e13344
commit 7b0643c77b
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/src/sgml/config.sgml
View File

@ -1143,7 +1143,7 @@ include_dir 'conf.d'
</term> </term>
<listitem> <listitem>
<para> <para>
Specifies the name of the file containing the SSL server certificate Specifies the name of the file containing the SSL client certificate
revocation list (CRL). revocation list (CRL).
Relative paths are relative to the data directory. Relative paths are relative to the data directory.
This parameter can only be set in the <filename>postgresql.conf</filename> This parameter can only be set in the <filename>postgresql.conf</filename>

2
doc/src/sgml/libpq.sgml
View File

@ -1519,7 +1519,7 @@ postgresql://%2Fvar%2Flib%2Fpostgresql/dbname
<term><literal>sslcrl</literal></term> <term><literal>sslcrl</literal></term>
<listitem> <listitem>
<para> <para>
This parameter specifies the file name of the SSL certificate This parameter specifies the file name of the SSL server certificate
revocation list (CRL). Certificates listed in this file, if it revocation list (CRL). Certificates listed in this file, if it
exists, will be rejected while attempting to authenticate the exists, will be rejected while attempting to authenticate the
server's certificate. The default is server's certificate. The default is