Commitb1ae70b

committed

docs: clarify intermediate certificate creation instructions

Specifically, explain the v3_ca openssl specification.Discussion:https://postgr.es/m/20200824175653.GA32411@momjian.usBackpatch-through: 9.5

1 parent70e791f commitb1ae70bCopy full SHA for b1ae70b

File tree

-2

lines changed

-2

lines changed

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -2193,8 +2193,10 @@ pg_dumpall -p 5432 \| psql -d postgres -p 5433`
`2193`	`2193`	`The certificates of <quote>intermediate</quote> certificate authorities`
`2194`	`2194`	`can also be appended to the file. Doing this avoids the necessity of`
`2195`	`2195`	`storing intermediate certificates on clients, assuming the root and`
`2196`		`- intermediate certificates were created with <literal>v3_ca</literal>`
`2197`		`- extensions. This allows easier expiration of intermediate certificates.`
	`2196`	`+ intermediate certificates were created with <literal>v3_ca </literal>`
	`2197`	`+ extensions. (This sets the certificate's basic constraint of`
	`2198`	`+ <literal>CA</literal> to <literal>true</literal>.)`
	`2199`	`+ This allows easier expiration of intermediate certificates.`
`2198`	`2200`	`</para>`
`2199`	`2201`
`2200`	`2202`	`<para>`

Comments

(0)