aboutsummaryrefslogtreecommitdiff
path: root/src/test/ssl
diff options
context:
space:
mode:
authorDaniel Gustafsson <dgustafsson@postgresql.org>2024-02-28 22:57:00 +0100
committerDaniel Gustafsson <dgustafsson@postgresql.org>2024-02-28 22:57:00 +0100
commit6a6b7f5de3ff0dad46aab9e8e17a3747370199a3 (patch)
tree6b01424393b1e101ed0f2a4f3527f7df889af29a /src/test/ssl
parent2a6b47cb50eb9b62b050de2cddd03a9ac267e61f (diff)
downloadpostgresql-6a6b7f5de3ff0dad46aab9e8e17a3747370199a3.tar.gz
postgresql-6a6b7f5de3ff0dad46aab9e8e17a3747370199a3.zip
Fix documentation comments for test CA config files
The config files which are used to generate the server and client CAs claimed that these were self-signed, when they in reality are signed by the root_ca (which however is self-signed). Reword the comments to match. Author: David Zhang <david.zhang@highgo.ca> Discussion: https://postgr.es/m/12f4c425-45fe-480f-a692-b3ed82ebcb33@highgo.ca
Diffstat (limited to 'src/test/ssl')
-rw-r--r--src/test/ssl/conf/client_ca.config8
-rw-r--r--src/test/ssl/conf/root_ca.config2
-rw-r--r--src/test/ssl/conf/server_ca.config8
3 files changed, 11 insertions, 7 deletions
diff --git a/src/test/ssl/conf/client_ca.config b/src/test/ssl/conf/client_ca.config
index 5990f060002..08365aac955 100644
--- a/src/test/ssl/conf/client_ca.config
+++ b/src/test/ssl/conf/client_ca.config
@@ -1,7 +1,9 @@
-# An OpenSSL format CSR config file for creating the client root certificate.
-# This configuration file is also used when operating the CA.
+# An OpenSSL format CSR config file for creating the client Intermediate
+# Certificate Authority. This configuration file is also used when operating
+# the CA.
#
-# This certificate is used to sign client certificates. It is self-signed.
+# This certificate is used to sign client certificates. It is an Intermediate
+# CA.
[ req ]
distinguished_name = req_distinguished_name
diff --git a/src/test/ssl/conf/root_ca.config b/src/test/ssl/conf/root_ca.config
index e193186f8bf..6caa8a1ae63 100644
--- a/src/test/ssl/conf/root_ca.config
+++ b/src/test/ssl/conf/root_ca.config
@@ -1,5 +1,5 @@
# A root certificate authority. The server and client CA's certificates
-# are signed by this root CA.
+# are signed by this root CA. This certificate is self-signed.
[ req ]
distinguished_name = req_distinguished_name
diff --git a/src/test/ssl/conf/server_ca.config b/src/test/ssl/conf/server_ca.config
index 496aaba29fb..15f8d1590fe 100644
--- a/src/test/ssl/conf/server_ca.config
+++ b/src/test/ssl/conf/server_ca.config
@@ -1,7 +1,9 @@
-# An OpenSSL format CSR config file for creating the server root certificate.
-# This configuration file is also used when operating the CA.
+# An OpenSSL format CSR config file for creating the server Intermediate
+# Certificate Authority. This configuration file is also used when operating
+# the CA.
#
-# This certificate is used to sign server certificates. It is self-signed.
+# This certificate is used to sign server certificates. It is an Intermediate
+# CA.
[ req ]
distinguished_name = req_distinguished_name