Re: pgsql: Add pg_alterckey utility to change the cluster key

2020-12-28 Thread Bruce Momjian
On Mon, Dec 28, 2020 at 10:09:11AM -0400, Fabien COELHO wrote: > Yep, my point is that it should be possible to have the whole key management > outside of postgres. I think this kind of discussion has to happen in a different thread, parhsps: https://www.postgresql.org/message-id/flat/20

Re: pgsql: Add pg_alterckey utility to change the cluster key

2020-12-28 Thread Fabien COELHO
Hello Bruce, I put the thread back on hackers. The first two keys are stored in pg_cryptokeys/ in the data directory, while the third one is retrieved using a GUC for validation at server startup for the other two. Do we necessarily have to store the first level keys within the data directo