Re: [HACKERS] Self-signed certificate instructions

2017-04-17 Thread Andreas Karlsson
On 04/15/2017 03:58 PM, Andrew Dunstan wrote: The instructions on how to create a self-signed certificate in s 18.9.3 of the docs seem unduly cumbersome. +1, I see no reason for us to spread unnecessarily complicated instructions. Andreas -- Sent via pgsql-hackers mailing list (pgsql-hackers

Re: [HACKERS] Self-signed certificate instructions

2017-04-17 Thread Bruce Momjian
On Mon, Apr 17, 2017 at 04:27:30PM -0400, Andrew Dunstan wrote: > > I would like to revisit these instructions, as well as document how to > > create intermediate certificates. I have scripts that do that. > > > > > OK.. Do you want to run with this? Please go forward and I will work on the int

Re: [HACKERS] Self-signed certificate instructions

2017-04-17 Thread Andrew Dunstan
On 04/17/2017 02:19 PM, Bruce Momjian wrote: > On Sat, Apr 15, 2017 at 11:17:14AM -0400, Andrew Dunstan wrote: >> >> On 04/15/2017 09:58 AM, Andrew Dunstan wrote: >>> The instructions on how to create a self-signed certificate in s 18.9.3 >>> of the docs seem unduly cumbersome. AFAICT we could re

Re: [HACKERS] Self-signed certificate instructions

2017-04-17 Thread Bruce Momjian
On Mon, Apr 17, 2017 at 03:43:09PM -0400, Tom Lane wrote: > Bruce Momjian writes: > > I think the reason we have those cumbersome instructions is that there > > is no way to create a non-expireable certificate using simpler > > instructions. > > Um ... but the current instructions don't address t

Re: [HACKERS] Self-signed certificate instructions

2017-04-17 Thread Tom Lane
Bruce Momjian writes: > I think the reason we have those cumbersome instructions is that there > is no way to create a non-expireable certificate using simpler > instructions. Um ... but the current instructions don't address that either. > I would like to revisit these instructions, as well as

Re: [HACKERS] Self-signed certificate instructions

2017-04-17 Thread Bruce Momjian
On Sat, Apr 15, 2017 at 11:17:14AM -0400, Andrew Dunstan wrote: > > > On 04/15/2017 09:58 AM, Andrew Dunstan wrote: > > The instructions on how to create a self-signed certificate in s 18.9.3 > > of the docs seem unduly cumbersome. AFAICT we could replace all the > > commands (except the chmod) w

Re: [HACKERS] Self-signed certificate instructions

2017-04-15 Thread Magnus Hagander
On Sat, Apr 15, 2017 at 7:54 PM, Tom Lane wrote: > Andrew Dunstan writes: > > The instructions on how to create a self-signed certificate in s 18.9.3 > > of the docs seem unduly cumbersome. > > Yeah, I noticed that they seemed unnecessarily manual. +1 for > simplifying. > Seems reasonable, +1

Re: [HACKERS] Self-signed certificate instructions

2017-04-15 Thread Tom Lane
Andrew Dunstan writes: > The instructions on how to create a self-signed certificate in s 18.9.3 > of the docs seem unduly cumbersome. Yeah, I noticed that they seemed unnecessarily manual. +1 for simplifying. regards, tom lane -- Sent via pgsql-hackers mailing list (

Re: [HACKERS] Self-signed certificate instructions

2017-04-15 Thread Andrew Dunstan
On 04/15/2017 09:58 AM, Andrew Dunstan wrote: > The instructions on how to create a self-signed certificate in s 18.9.3 > of the docs seem unduly cumbersome. AFAICT we could replace all the > commands (except the chmod) with something like this: > > |openssl req -new-x509 -days 365-nodes \ -t

[HACKERS] Self-signed certificate instructions

2017-04-15 Thread Andrew Dunstan
The instructions on how to create a self-signed certificate in s 18.9.3 of the docs seem unduly cumbersome. AFAICT we could replace all the commands (except the chmod) with something like this: |openssl req -new-x509 -days 365-nodes \ -text -outserver.crt\ -keyout server.key\ -subj "/C=XY