Commit0756921

committed

docs: clarify intermediate certificate creation instructions

Specifically, explain the v3_ca openssl specification.Discussion:https://postgr.es/m/20200824175653.GA32411@momjian.usBackpatch-through: 9.5

1 parentf6679e0 commit0756921Copy full SHA for 0756921

File tree

-2

lines changed

-2

lines changed

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -2255,8 +2255,10 @@ pg_dumpall -p 5432 \| psql -d postgres -p 5433`
`2255`	`2255`	`The certificates of <quote>intermediate</> certificate authorities`
`2256`	`2256`	`can also be appended to the file. Doing this avoids the necessity of`
`2257`	`2257`	`storing intermediate certificates on clients, assuming the root and`
`2258`		`- intermediate certificates were created with <literal>v3_ca</>`
`2259`		`- extensions. This allows easier expiration of intermediate certificates.`
	`2258`	`+ intermediate certificates were created with <literal>v3_ca </literal>`
	`2259`	`+ extensions. (This sets the certificate's basic constraint of`
	`2260`	`+ <literal>CA</literal> to <literal>true</literal>.)`
	`2261`	`+ This allows easier expiration of intermediate certificates.`
`2260`	`2262`	`</para>`
`2261`	`2263`
`2262`	`2264`	`<para>`

Comments

(0)