Deprecated openssl command option in documentation

From: PG Doc comments form <noreply(at)postgresql(dot)org>
To: pgsql-docs(at)lists(dot)postgresql(dot)org
Cc: mg2216(at)cam(dot)ac(dot)uk
Subject: Deprecated openssl command option in documentation
Date: 2025-06-18 11:24:15
Message-ID: 175024585559.3372338.192465486811785718@wrigleys.postgresql.org
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-docs

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/17/ssl-tcp.html
Description:

Hi
In the documentation at https://www.postgresql.org/docs/17/ssl-tcp.html, it
says, in 18.9.5. Creating Certificates:
```
To create a simple self-signed certificate for the server, valid for 365
days, use the following OpenSSL command, replacing dbhost.yourdomain.com
with the server's host name:
openssl req -new -x509 -days 365 -nodes -text -out server.crt \
-keyout server.key -subj "/CN=dbhost.yourdomain.com"
```
However, on Ubuntu, running "openssl req --help" shows the following:
```
Output options:
...
-noenc Don't encrypt private keys
-nodes Don't encrypt private keys; deprecated
```
Therefore, I suggest you replace the "-nodes" switch in the command example
to "-noenc".
Ubuntu version:
```
$ cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.5 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.5 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy
```

Responses

Browse pgsql-docs by date

  From Date Subject
Next Message Daniel Gustafsson 2025-06-18 11:59:52 Re: Deprecated openssl command option in documentation
Previous Message Fujii Masao 2025-06-18 07:55:56 Re: Fix inaccurate mention of index comments in CREATE FOREIGN TABLE docs