diff options
| author | Daniel Gustafsson <dgustafsson@postgresql.org> | 2024-02-01 09:36:34 +0100 |
|---|---|---|
| committer | Daniel Gustafsson <dgustafsson@postgresql.org> | 2024-02-01 09:36:34 +0100 |
| commit | da9cb249575229cbdebd27a3ba398efd072aa84b (patch) | |
| tree | 75aca8ddfdaf8dee88fce0db533c38277046fc07 | |
| parent | 171d21f50c3ee3f17911daa3d91eb75363669a11 (diff) | |
| download | postgresql-da9cb249575229cbdebd27a3ba398efd072aa84b.tar.gz postgresql-da9cb249575229cbdebd27a3ba398efd072aa84b.zip | |
doc: Fix incorrect openssl option
The openssl command for displaying the DN of a client certificate was
using --subject and not the single-dash option -subject. While recent
versions of openssl handles double dash options, earlier does not so
fix by using just -subject (which is per the openssl documentation).
Backpatch to v14 where this was introduced.
Reported-by: konkove@gmail.com
Discussion: https://postgr.es/m/170672168899.666.10442618407194498217@wrigleys.postgresql.org
Backpatch-through: v14
| -rw-r--r-- | doc/src/sgml/client-auth.sgml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml index 20d0c31ed3b..68e73b9c328 100644 --- a/doc/src/sgml/client-auth.sgml +++ b/doc/src/sgml/client-auth.sgml @@ -631,7 +631,7 @@ hostnogssenc <replaceable>database</replaceable> <replaceable>user</replaceabl format. To see the <literal>DN</literal> of a client certificate in this format, do <programlisting> -openssl x509 -in myclient.crt -noout --subject -nameopt RFC2253 | sed "s/^subject=//" +openssl x509 -in myclient.crt -noout -subject -nameopt RFC2253 | sed "s/^subject=//" </programlisting> Care needs to be taken when using this option, especially when using regular expression matching against the <literal>DN</literal>. |