[Pkg-postgresql-public] Bug#680162: Bug#680162: Bug#680162: postgresql-common: Use SSL cert configuration variables instead of symlinks for 9.2

[Magnus Hagander]

On Wed, Jul 4, 2012 at 5:03 PM, Daniel Kahn Gillmor
<dkg at fifthhorseman.net> wrote:
> On 07/04/2012 01:15 AM, Martin Pitt wrote:
>> Martin Pitt [2012-07-04  8:55 +0200]:
>>> And I could probably file it in a bugtracker, if I knew which one :-)
>>
>> I took the liberty to forward this to the Debian bug tracker, so it's
>> now tracked in http://bugs.debian.org/680162 .
>>
>>> 9.2 adds the parameters ssl_cert_file and ssl_key_file to control the
>>> location of the SSL files. The debian packages should change to use
>>> this instead of the symlinks that are used now.
>>
>> That's excellent, thanks for pointing out! I'll change that in
>> pg_createcluster, and adjust the test cases if necessary.
>
> Where do you think these variables should point to?

To replicate similar functionality to what we had before, they should
point to the same location as the symlinks used to point.

*Personally* I think it's a broken thing that SSL is enabled by
default with a snakeoil cert. I think enabling of SSL needs to be done
as a conscious decision. But I'm told that's a policy, and I'm not
arguing that point at this stage - just trying to get the same
functionality using the new parameters in order not to interfere with
base backups. One step at a time :)


> Will any of the interested parties here be at debconf this coming week?

Not me, I'm afraid - either local or via streaming/IRC.

-- 
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/