Re: Setting up SSL for postgre

Поиск

Список

Период

Сортировка

От	Wim Bertels
Тема	Re: Setting up SSL for postgre
Дата	22 августа 2018 г. 14:19:12
Msg-id	1534925952974.49431@ucll.be обсуждение исходный текст
Ответ на	RE: Setting up SSL for postgre ("Mark Williams" <markwillimas@gmail.com>)
Ответы	RE: Setting up SSL for postgre ("Mark Williams" <markwillimas@gmail.com>)
Список	pgsql-admin

Дерево обсуждения

Hallo Mark,

as i quickly read the error message in your question,

these we're my first suggestions.

either

* did you intent cert aut for the postgres user?

* u use a selfsigned certificate, hence software that checks for the validity will fail or ask for this

** using for example the free, but official letsencrypt certificates this should be solved

hth,

Wim

Van: Mark Williams <markwillimas@gmail.com>
Verzonden: maandag 20 augustus 2018 16:51
Aan: Wim Bertels; pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr
Onderwerp: RE: Setting up SSL for postgre

Hi,

Sorry I don’t understand what you are suggesting re the pg_hba file.

From: Wim Bertels <wim.bertels@ucll.be>
Sent: 20 August 2018 14:30
To: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr
Subject: Re: Setting up SSL for postgre

pg_hba.conf
# TYPE DATABASE        USER            CIDR-ADDRESS            METHOD

# IPv4 local & remote connections:
host    all             all             127.0.0.1/32            trust
hostssl all         postgres    0.0.0.0/0             cert

cert method for auth, hence this behaviour (client cert..)

extra tip:

https://duckduckgo.com/?q=letsencrypt+postgresql

for official server side certificates

mvg,

Bertels Wim