Horton

Is it worth accepting multiple CRLs?

Kyotaro Horiguchi <horikyota.ntt@gmail.com>

View thread View on postgr.es
From: Kyotaro Horiguchi <horikyota.ntt@gmail.com>
To: pgsql-hackers@postgresql.org
Date: 2020-07-31T08:39:11Z
Lists: pgsql-hackers 
Hello.

PostgreSQL server accepts only one CRL file. It is easy to expand
be_tls_init to accept a directory set in ssl_crl_file. But I'm not
sure CRL is actually even utilized in the field so that could ends
with just bloating the documentation.

Is it work doing?

regards.

-- 
Kyotaro Horiguchi
NTT Open Source Software Center

Commits

  1. Allow specifying CRL directory

  2. Introduce --with-ssl={openssl} as a configure option