Commit01bcfe7

committed

docs: clarify intermediate certificate creation instructions

Specifically, explain the v3_ca openssl specification.Discussion:https://postgr.es/m/20200824175653.GA32411@momjian.usBackpatch-through: 9.5

1 parent0d447ba commit01bcfe7Copy full SHA for 01bcfe7

File tree

-2

lines changed

-2

lines changed

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -2324,8 +2324,10 @@ pg_dumpall -p 5432 \| psql -d postgres -p 5433`
`2324`	`2324`	`The certificates of <quote>intermediate</quote> certificate authorities`
`2325`	`2325`	`can also be appended to the file. Doing this avoids the necessity of`
`2326`	`2326`	`storing intermediate certificates on clients, assuming the root and`
`2327`		`- intermediate certificates were created with <literal>v3_ca</literal>`
`2328`		`- extensions. This allows easier expiration of intermediate certificates.`
	`2327`	`+ intermediate certificates were created with <literal>v3_ca </literal>`
	`2328`	`+ extensions. (This sets the certificate's basic constraint of`
	`2329`	`+ <literal>CA</literal> to <literal>true</literal>.)`
	`2330`	`+ This allows easier expiration of intermediate certificates.`
`2329`	`2331`	`</para>`
`2330`	`2332`
`2331`	`2333`	`<para>`

Comments

(0)