Re: Any advantage of using SSL with a certificate of authority?

From: Vick Khera <vivek(at)khera(dot)org>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: John R Pierce <pierce(at)hogranch(dot)com>, pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: Any advantage of using SSL with a certificate of authority?
Date: 2013-11-27 13:40:04
Message-ID: CALd+dccNod4+9UJ40sX3RTpjNge4ZDc8vs32aTfFQ87-0b6uGw@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Tue, Nov 26, 2013 at 4:48 PM, Bruce Momjian <bruce(at)momjian(dot)us> wrote:

> Right. I know of no mechanism to verify a certificate via a public CA
> through SSL. Browsers have a list of trusted certificates, but SSL
> alone doesn't, as far as I know.
>

SSL as a library/protocol has mechanisms to verify the certificates. The
list of certificates that are trusted is left to the implementation. Most
people install the mozilla cert bundle and use that.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Kevin Grittner 2013-11-27 14:05:13 Re: [GENERAL] pg_upgrade ?deficiency
Previous Message Vik Fearing 2013-11-27 13:29:42 Re: help interpreting "explain analyze" output