Re: Correction of intermediate certificate handling

2018-01-16 Thread Bruce Momjian
On Wed, Jan 17, 2018 at 09:09:50AM +0900, Michael Paquier wrote: > On Tue, Jan 16, 2018 at 11:21:22AM -0500, Bruce Momjian wrote: > > On Tue, Jan 16, 2018 at 02:33:05PM +0900, Michael Paquier wrote: > > > This bit is important. I am happy that your patch mentions that > > > intermediate certificate

Re: Correction of intermediate certificate handling

2018-01-16 Thread Michael Paquier
On Tue, Jan 16, 2018 at 11:21:22AM -0500, Bruce Momjian wrote: > On Tue, Jan 16, 2018 at 02:33:05PM +0900, Michael Paquier wrote: > > This bit is important. I am happy that your patch mentions that > > intermediate certificates avoid the need to store root ones on the > > client. Should the docs me

Re: Correction of intermediate certificate handling

2018-01-16 Thread Bruce Momjian
On Tue, Jan 16, 2018 at 02:33:05PM +0900, Michael Paquier wrote: > > My talk documents this behavior. In this talk: > > > > https://momjian.us/main/writings/pgsql/tls.pdf > > > > slide 47 and 49 use -extensions v3_ca. Slides 73 and 74 show that the > > intermediate is not needed on the clie

Re: initdb

2018-01-16 Thread Scott Watson
Hi Tom, I was running initdb command when calling the postgresql96-setup command. Trying to run this as the user postgres failed. /usr/pgsql-9.6/bin/postgresql96-setup initdb The database was created under /var/lib/pgsql/9.6/data thanks Scott. On Mon, Jan 15, 2018 at 4:56 PM, Tom Lane wrot