Wiki / Configuration Parameters

Specifies the name of the directory containing the SSL client certificate revocation list (CRL). Relative paths are relative to the data directory. This parameter can only be set in the postgresql.conf file or on the server command line. The default is empty, meaning no CRLs are used (unless ssl_crl_file is set). The directory needs to be prepared with the OpenSSL command openssl rehash or c_rehash. See its documentation for details. When using this setting, CRLs in the specified directory are loaded on-demand at connection time. New CRLs can be added to the directory and will be used immediately. This is unlike ssl_crl_file, which causes the CRL in the file to be loaded at server start time or when the configuration is reloaded. Both settings can be used together.

English manual coverage begins with PostgreSQL 7.4. Source history and runtime observations have their own recorded version boundaries.

boot val

Unknown

category

Connections and Authentication / SSL

context

sighup

documented

true

enumvals

Unknown

extra desc

Unknown

lang

en

max val

Unknown

metadata version

18

min val

Unknown

name

ssl_crl_dir

short desc

Location of the SSL certificate revocation list directory.

source

pg-settings-source-snapshot

unit

Unknown

vartype

string