Re: Is it worth accepting multiple CRLs? - Mailing list pgsql-hackers

From Stephen Frost
Subject Re: Is it worth accepting multiple CRLs?
Date
Msg-id 20200731130014.GC12375@tamriel.snowman.net
Whole thread Raw
In response to Is it worth accepting multiple CRLs?  (Kyotaro Horiguchi <horikyota.ntt@gmail.com>)
Responses Re: Is it worth accepting multiple CRLs?
List pgsql-hackers
Greetings,

* Kyotaro Horiguchi (horikyota.ntt@gmail.com) wrote:
> PostgreSQL server accepts only one CRL file. It is easy to expand
> be_tls_init to accept a directory set in ssl_crl_file. But I'm not
> sure CRL is actually even utilized in the field so that could ends
> with just bloating the documentation.
>
> Is it work doing?

Yes, CRLs are absolutely used in the field and having this would be
nice.

Thanks,

Stephen

Attachment

pgsql-hackers by date:

Previous
From: Henry B Hotz
Date:
Subject: Re: Is it worth accepting multiple CRLs?
Next
From: James Coleman
Date:
Subject: Re: Use of "long" in incremental sort code