Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11

Поиск

Список

Период

Сортировка

От	Yi Sun
Тема	Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11
Дата	2 декабря 2021 г. 06:31:26
Msg-id	CABWY_HCjmzoGB1chrJXG6otCVdg9teuW-UJr4afeSjjRZZKxFA@mail.gmail.com обсуждение исходный текст
Ответ на	Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11 (Kyotaro Horiguchi <horikyota.ntt@gmail.com>)
Ответы	Re: ssl_crl_file Certificate Revocation List doesn't work for postgresql 11 (Kyotaro Horiguchi <horikyota.ntt@gmail.com>)
Список	pgsql-general

Hi Kyotaro

From the description, seems ~/.postgresql/root.crl is store client revoked certificate

~/.postgresql/root.crl certificates revoked by certificate authorities server certificate must not be on this list

Just don't know why server parameter ssl_crl_file parameter configured but don't take affect

ssl_crl_file (string): Specifies the name of the file containing the SSL server certificate revocation list (CRL). Relative paths are relative to the data directory. This parameter can only be set in the postgresql.conf file or on the server command line. The default is empty, meaning no CRL file is loaded.

В списке pgsql-general по дате отправления:

От: Michael Lewis
Дата: 02 декабря 2021 г., 05:08:08
Сообщение: Re: Max connections reached without max connections reached

От: Rob Sargent
Дата: 02 декабря 2021 г., 06:54:20
Сообщение: Re: Max connections reached without max connections reached