Re: SSL string

On Sat, Apr 20, 2019 at 02:02:08AM +0000, PG Doc comments form wrote:
> The following documentation comment has been logged on the website:
> 
> Page: https://www.postgresql.org/docs/11/ssl-tcp.html
> Description:
> 
> In Section 18.9, the example showing how to create an SSL certificate:
> 
> openssl req -new -x509 -days 365 -nodes -text -out server.crt \
>   -keyout server.key -subj "/CN=dbhost.yourdomain.com"
> 
> Generating a RSA private key
> ..............................+++++
> ..............................................................................................+++++
> writing new private key to 'server.key'
> -----
> name is expected to be in the format /type0=value0/type1=value1/type2=...
> where characters may be escaped by \. This name is not in that format:
> '/CN=dbhost.yourdomain.com'
> problems making Certificate Request
> 
> A little research showed me I had to add a /C=<2 character country
> name>/L=<location>/ST=<state>/O=<organization>/OU=<organization unit> to the
> 
> '/CN=dbhost.yourdomain.com' string.   I also discovered that the /C=<country
> name> had to be 2 characters.

What version of openssl is this, and what platform?  That command works
for me on Debian stretch, OpenSSL 1.1.0j  20 Nov 2018.  What command are
you typing?

-- 
  Bruce Momjian  <[email protected]>        http://momjian.us
  EnterpriseDB                             http://enterprisedb.com

+ As you are, so once was I.  As I am, so you will be. +
+                      Ancient Roman grave inscription +