severity 319110 wishlist
retitle 319110 provide a default root.crt
thanks

Hi Andreas!

Andreas Pakulat [2005-07-20  0:13 +0200]:
> according to the logfile, postgresql looks for the server certificate in
> /var/lib/postgresql/8.0/main/root.crt, but the link to the
> postgresql-common-certificate is called server.crt. 

server.crt is indeed the correct server certificate and postgresql
uses it. root.crt is the collection of valid client certificates, thus
provides client side authentication. It doesn't hurt if root.crt is
not present, it's not used in this case. (Look at
file:///usr/share/doc/postgresql-doc-8.0/html/ssl-tcp.html if you have
postgresql-doc-8.0 installed).

However, I'm not sure whether it makes sense to ship a default
root.crt. What do you think?

-- 
Martin Pitt        http://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

Attachment: signature.asc
Description: Digital signature

Reply via email to