Re: SSL key with passphrase

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Thom Brown <thom(at)linux(dot)com>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: SSL key with passphrase
Date: 2012-08-16 00:52:45
Message-ID: 20120816005245.GE8353@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, Sep 14, 2011 at 02:40:15AM +0100, Thom Brown wrote:
> On 13 September 2011 15:17, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> > Thom Brown <thom(at)linux(dot)com> writes:
> >> There appears to be a problem with starting Postgres if the SSL key
> >> has a passphrase on it.
> >
> > It's documented that that's unsupported.  Given the number of ways to
> > start a postmaster, and the fact that many of them are noninteractive,
> > I don't think it's very productive for us to worry about it.
>
> I've managed to get pg_ctl to accept the passphrase with the -w
> option. Works fine like that. Since that works, perhaps the page
> referring to SSL could mention this.

I have added a documention mention as you suggested for PG 9.3 in the
'-w' option section.

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ It's impossible for everything to be true. +

Attachment Content-Type Size
ssl.diff text/x-diff 677 bytes

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2012-08-16 02:26:55 Re: feature request: auto savepoint for interactive psql when in transaction.
Previous Message Bruce Momjian 2012-08-16 00:45:40 Re: Patch to improve reliability of postgresql on linux nfs