1
0
mirror of https://github.com/postgres/postgres.git synced 2025-05-03 22:24:49 +03:00

docs: clarify intermediate certificate creation instructions

Specifically, explain the v3_ca openssl specification.

Discussion: https://postgr.es/m/20200824175653.GA32411@momjian.us

Backpatch-through: 9.5
This commit is contained in:
Bruce Momjian 2020-08-31 16:21:03 -04:00
parent f6679e0b4b
commit 0756921abe

View File

@ -2255,8 +2255,10 @@ pg_dumpall -p 5432 | psql -d postgres -p 5433
The certificates of <quote>intermediate</> certificate authorities The certificates of <quote>intermediate</> certificate authorities
can also be appended to the file. Doing this avoids the necessity of can also be appended to the file. Doing this avoids the necessity of
storing intermediate certificates on clients, assuming the root and storing intermediate certificates on clients, assuming the root and
intermediate certificates were created with <literal>v3_ca</> intermediate certificates were created with <literal>v3_ca </literal>
extensions. This allows easier expiration of intermediate certificates. extensions. (This sets the certificate's basic constraint of
<literal>CA</literal> to <literal>true</literal>.)
This allows easier expiration of intermediate certificates.
</para> </para>
<para> <para>