mirror of
https://github.com/postgres/postgres.git
synced 2025-11-06 07:49:08 +03:00
In the docs, better distinguish server from client SSL settings in the documentation.
Ray Stell Also fix some libpq title capitalization problems.
This commit is contained in:
@@ -1770,27 +1770,27 @@ $ <userinput>kill -INT `head -1 /usr/local/pgsql/data/postmaster.pid`</userinput
|
||||
<tbody>
|
||||
|
||||
<row>
|
||||
<entry><filename>server.crt</></entry>
|
||||
<entry><filename>$PGDATA/server.crt</></entry>
|
||||
<entry>server certificate</entry>
|
||||
<entry>sent to client to indicate server's identity</entry>
|
||||
</row>
|
||||
|
||||
<row>
|
||||
<entry><filename>server.key</></entry>
|
||||
<entry><filename>$PGDATA/server.key</></entry>
|
||||
<entry>server private key</entry>
|
||||
<entry>proves server certificate was sent by the owner; does not indicate
|
||||
certificate owner is trustworthy</entry>
|
||||
</row>
|
||||
|
||||
<row>
|
||||
<entry><filename>root.crt</></entry>
|
||||
<entry><filename>$PGDATA/root.crt</></entry>
|
||||
<entry>trusted certificate authorities</entry>
|
||||
<entry>checks that client certificate is
|
||||
signed by a trusted certificate authority</entry>
|
||||
</row>
|
||||
|
||||
<row>
|
||||
<entry><filename>root.crl</></entry>
|
||||
<entry><filename>$PGDATA/root.crl</></entry>
|
||||
<entry>certificates revoked by certificate authorities</entry>
|
||||
<entry>client certificate must not be on this list</entry>
|
||||
</row>
|
||||
|
||||
Reference in New Issue
Block a user