Commit8924ca8

committed

docs: clarify intermediate certificate creation instructions

Specifically, explain the v3_ca openssl specification.Discussion:https://postgr.es/m/20200824175653.GA32411@momjian.usBackpatch-through: 9.5

1 parent1bb41c6 commit8924ca8Copy full SHA for 8924ca8

File tree

-2

lines changed

-2

lines changed

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -2178,8 +2178,10 @@ pg_dumpall -p 5432 \| psql -d postgres -p 5433`
`2178`	`2178`	`The certificates of <quote>intermediate</quote> certificate authorities`
`2179`	`2179`	`can also be appended to the file. Doing this avoids the necessity of`
`2180`	`2180`	`storing intermediate certificates on clients, assuming the root and`
`2181`		`- intermediate certificates were created with <literal>v3_ca</literal>`
`2182`		`- extensions. This allows easier expiration of intermediate certificates.`
	`2181`	`+ intermediate certificates were created with <literal>v3_ca </literal>`
	`2182`	`+ extensions. (This sets the certificate's basic constraint of`
	`2183`	`+ <literal>CA</literal> to <literal>true</literal>.)`
	`2184`	`+ This allows easier expiration of intermediate certificates.`
`2183`	`2185`	`</para>`
`2184`	`2186`
`2185`	`2187`	`<para>`

Comments

(0)