Re: Making sslrootcert=system work on Windows psql
От | George MacKerron |
---|---|
Тема | Re: Making sslrootcert=system work on Windows psql |
Дата | |
Msg-id | 6879E9A3-E71A-4E7E-BAC6-2B91F29C11AE@mackerron.co.uk обсуждение исходный текст |
Ответ на | Re: Making sslrootcert=system work on Windows psql (Jelte Fennema-Nio <postgres@jeltef.nl>) |
Список | pgsql-hackers |
> On Fri, 25 Apr 2025 at 12:22, George MacKerron <george@mackerron.co.uk> wrote: >> I know the documentation has now been changed to reflect that ‘system’ actually means OpenSSL. > > I didn't realize that. I'm definitely not in favor of that doc change. > It's describing behaviour that I believe is incorrect, as if it's > actually intended. The change was described in Daniel’s message on 3 April. It’s actually a bit subtler than I suggested. The diff is: The special value <literal>system</literal> may be specified instead, in - which case the system's trusted CA roots will be loaded. + which case the trusted CA roots from the SSL implementation will be loaded. I agree with you here: the change makes the docs more correct, but the correctly-documented behaviour itself still seemsincorrect to me. I think a clue is that the word ‘system’ no longer appears in the updated version of text explaining what sslrootcert=systemdoes!
В списке pgsql-hackers по дате отправления: