marc

The error message is directly from the Go TLS library. This occurs when the certificate/key files do not parse properly. Make sure the argument to `echo` is correct, it looks...

Sure: ``` ./tpcc/tpcc -load 'postgres://root@localhost:26257/?sslmode=verify-full&sslrootcert=certs/ca.crt&sslcert=certs/client.root.crt&sslkey=certs/client.root.key' Created 9 tables Loaded 100000/100000 items TPCCLoadItem 100000 28456.9 ns/op Loading warehouse 1/1 Loaded 100000/100000 stocks TPCCLoadStock 100000 63232.9 ns/op etc... ``` Again, the error...

Unfortunately not. Until it is, you can convert the key using `openssl` after the `request-cert` job has finished running. Specifically: ``` openssl pkcs8 -topk8 -inform PEM -outform DER -in client.maxroach.key...

Given the fact that `root` is a hard-coded user in cockroach, I'm not entirely sure this is feasible. We could create a less common username and add it to the...

We have to use the CN with exactly the user name, or we're not longer pg compatible. see: https://www.postgresql.org/docs/10/static/auth-methods.html#AUTH-CERT If k8s does the same, and only requires a valid certificate...