aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Gustafsson <dgustafsson@postgresql.org>2024-02-01 09:36:34 +0100
committerDaniel Gustafsson <dgustafsson@postgresql.org>2024-02-01 09:36:34 +0100
commit0df4f75eeafa6d7c7ec9a42744f7acea3eff6383 (patch)
tree6c7942f280ea273fe4ba8ba6c7edd7977da211fd
parent781bc121de897c235ae731ad9f58dfd4075a1008 (diff)
downloadpostgresql-0df4f75eeafa6d7c7ec9a42744f7acea3eff6383.tar.gz
postgresql-0df4f75eeafa6d7c7ec9a42744f7acea3eff6383.zip
doc: Fix incorrect openssl option
The openssl command for displaying the DN of a client certificate was using --subject and not the single-dash option -subject. While recent versions of openssl handles double dash options, earlier does not so fix by using just -subject (which is per the openssl documentation). Backpatch to v14 where this was introduced. Reported-by: konkove@gmail.com Discussion: https://postgr.es/m/170672168899.666.10442618407194498217@wrigleys.postgresql.org Backpatch-through: v14
-rw-r--r--doc/src/sgml/client-auth.sgml2
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 7fcddaa97df..740ae77b6d0 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -666,7 +666,7 @@ include_dir <replaceable>directory</replaceable>
format. To see the <literal>DN</literal> of a client certificate
in this format, do
<programlisting>
-openssl x509 -in myclient.crt -noout --subject -nameopt RFC2253 | sed "s/^subject=//"
+openssl x509 -in myclient.crt -noout -subject -nameopt RFC2253 | sed "s/^subject=//"
</programlisting>
Care needs to be taken when using this option, especially when using
regular expression matching against the <literal>DN</literal>.