[pgpool-hackers: 3517] Re: [PATCH] Feature: Support for CRL (Certificate Revocation List)

[Umar Hayat]

Hi Tatsuo,
Please find the attached updated patch with following changes:
1. Updated the description of '*ssl_crl_file'* configuration variable.
2. Updated test case '024.cert_auth' which verify valid CRL and invalid CRL
( CRL with revocation entry )

Regards,
Umar Hayat


On Thu, Feb 13, 2020 at 3:43 AM Tatsuo Ishii <ishii at sraoss.co.jp> wrote:

> > I just followed the description pattern used for other ssl variables. We
> > can use PostgreSQL doc if we remove following two line from that:
> > "Relative paths are relative to the data
> > directory. This parameter can only be set in the postgresql.conf file
> > or on the server command line.
> > "
>
> Sounds good to me.
>
> > - It would be nice to include regression test patch. See
> >>   src/test/023.ssl_connection for an example.
> >>
> >
> > Sure, I will create and send test patch in src/test/023.ssl_connection.
> > I will try to generate CRL file for existing certification file in this
> > this test. If thats not possible, then I have to generate new
> certification
> > and CRL file.
>
> Thank you. Looking forward to the new patch.
>
> Best regards,
> --
> Tatsuo Ishii
> SRA OSS, Inc. Japan
> English: http://www.sraoss.co.jp/index_en.php
> Japanese:http://www.sraoss.co.jp
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.sraoss.jp/pipermail/pgpool-hackers/attachments/20200219/513bd599/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: crl_support_with_testcase.diff
Type: application/octet-stream
Size: 12405 bytes
Desc: not available
URL: <http://www.sraoss.jp/pipermail/pgpool-hackers/attachments/20200219/513bd599/attachment.obj>