Re: SSL - automatic entry of certificate passphrase in PostgreSQL 10?

Поиск
Список
Период
Сортировка
От Magnus Hagander
Тема Re: SSL - automatic entry of certificate passphrase in PostgreSQL 10?
Дата
Msg-id CABUevEy_rSWL0Mi2QsxtLyqrthK3pWd81J9Huwj90_CX91hq2w@mail.gmail.com
обсуждение исходный текст
Ответ на Re: SSL - automatic entry of certificate passphrase in PostgreSQL 10?  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-admin
Дерево обсуждения
On Fri, Dec 6, 2019 at 4:22 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
Martin Goodson <kaemaril@googlemail.com> writes:
> Or am I stuck with either requesting a new certificate without the
> passphrase or going to PostgreSQL 11?

AFAIK, those are your options.  Pre-v11 there was no reasonable way
to work with a server cert that requires a passphrase.

It should certainly be possible to remove the passphrase permanently from the received certificate again, no need for a new one. Well, technically the passphrase is on the key, and you remove it with something like:
openssl rsa -in current.key -out new.key

That'll ask for a passphrase for the old key, and write the new one out without.
 
--

В списке pgsql-admin по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: SSL - automatic entry of certificate passphrase in PostgreSQL 10?
Следующее
От: "Vasanth Kumar Pediseti"
Дата:
Сообщение: Re: SSL - automatic entry of certificate passphrase in PostgreSQL 10?