2 tool
=$
(readlink
-e "${0%/*}/..")
3 .
"$tool"/remote
/lib.sh
6 key
="$tool"/var
/sec
/x509
/postgresql.
"$local_domainname"/user
/"$user"/key.pem
9 $(stdbuf --output 0 tr -d -c '[:alnum:]' <"${random:-/dev/urandom}" | head -c 42)
11 gpg
--yes --decrypt "$key".gpg |
12 openssl rsa
-in /dev
/stdin
-des3 -passout fd
:3 -out "$key" 3<<-EOF
16 PGSSLCERT
="$tool"/var
/pub
/x509
/postgresql.
"$local_domainname"/user
/"$user"/crt.pem \
18 PGSSLMODE
=verify-full \
19 PGSSLROOTCERT
="$tool"/var
/pub
/x509
/postgresql.
"$local_domainname"/crt
+ca.pem \
22 --host postgresql.
"$local_domainname" \
28 "Enter PEM pass phrase:" {