Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commitc88b36d

Browse files
doc: Clarify the system value for sslrootcert
The documentation for the special value "system" for sslrootcert couldbe misinterpreted to mean the default operating system CA store, whichit may be, but it's defined to be the default CA store of the SSL libused.Backpatch down to v16 where support for the system value was added.Author: Daniel Gustafsson <daniel@yesql.se>Reviewed-by: George MacKerron <george@mackerron.co.uk>Discussion:https://postgr.es/m/B3CBBAA3-6EA3-4AB7-8619-4BBFAB93DDB4@yesql.seBackpatch-through: 16
1 parentaab422a commitc88b36d

File tree

2 files changed

+3
-2
lines changed

2 files changed

+3
-2
lines changed

‎doc/src/sgml/libpq.sgml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1999,7 +1999,7 @@ postgresql://%2Fvar%2Flib%2Fpostgresql/dbname
19991999
</para>
20002000
<para>
20012001
The special value <literal>system</literal> may be specified instead, in
2002-
which case thesystem'strusted CA roots will be loaded. The exact
2002+
which case the trusted CA roots from the SSL implementation will be loaded. The exact
20032003
locations of these root certificates differ by SSL implementation and
20042004
platform. For <productname>OpenSSL</productname> in particular, the
20052005
locations may be further modified by the <envar>SSL_CERT_DIR</envar>

‎doc/src/sgml/runtime.sgml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1986,7 +1986,8 @@ pg_dumpall -p 5432 | psql -d postgres -p 5433
19861986
<literal>sslmode=verify-ca</literal> or
19871987
<literal>verify-full</literal> and have the appropriate root certificate
19881988
file installed (<xref linkend="libq-ssl-certificates"/>). Alternatively the
1989-
system CA pool can be used using <literal>sslrootcert=system</literal>; in
1989+
<link linkend="libpq-connect-sslrootcert">system CA pool</link>, as defined
1990+
by the SSL implementation, can be used using <literal>sslrootcert=system</literal>; in
19901991
this case, <literal>sslmode=verify-full</literal> is forced for safety, since
19911992
it is generally trivial to obtain certificates which are signed by a public
19921993
CA.

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp