Re: libpq: system-wide root.crt

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: pgsql-bugs(at)postgresql(dot)org, Stephen Gran <sgran(at)debian(dot)org>, DSA list <debian-admin(at)lists(dot)debian(dot)org>
Subject: Re: libpq: system-wide root.crt
Date: 2010-09-25 19:38:38
Message-ID: 1285443518.5571.3.camel@vanquo.pezone.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On fre, 2010-09-24 at 09:50 +0200, Magnus Hagander wrote:
> > I'm thinking, libpq could really use a global (and, for that matter, a
> > per-user) configuration file, where you could set defaults for some of
> > the things that you currently have to use environment variables for,
> > e.g., sslmode. And then you can configure the system-wide root.crt
> > location there.
>
> We already have this - pg_service.conf - no?

Indeed.

> > Alternatively, if you think that that is overkill, then using an
> > environment variable to configure this feature would be consistent with
> > the existing mechanisms.
>
> So in this case, a "sslfallbackroot=/etc/somewhere" parameter, that
> you could then stick in etc/pg_service.conf, or in any of the other
> places you can specify it? The one thing I think would be really
> needed for that to work is to support wildcard database names in
> pg_service.conf?

Yes.

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Robert Haas 2010-09-26 03:32:28 Re: BUG #5666: Pgadmin restore or back up database dont apper
Previous Message stagirus 2010-09-25 19:31:55 Re: Mapping Hibernate boolean to smallint(Postgresql)