Search Postgresql Archives

Re: Universal certificate for verify-full ssl connection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, May 31, 2011 at 10:06, Craig Ringer <craig@xxxxxxxxxxxxxxxxxxxxx> wrote:
> On 31/05/11 15:40, Asia wrote:
>
>> Would you please advise what I am doing wrong? Or maybe there is other way to generate wildcard certificate ? Or maybe this is a possible bug?
>
> I wouldn't be surprised if libpq didn't support wildcard certificates at
> all. I doubt there's ever been any demand for them.

It certainly does, and it's an important feature.

However, it's not intended to be used with IPs, it's intended to be
used with hostnames. The wildcard pattern has to start with "*."
(including the dot) to be considered. Thus a simple '*' in the
wildcard will not work, and anything starting with '*.' will never
match all IPs.

-- 
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/

-- 
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux