Re: PostgreSQL configurable SSL key checking

Поиск
Список
Период
Сортировка
От Alvaro Herrera
Тема Re: PostgreSQL configurable SSL key checking
Дата
Msg-id 20050905192701.GA20677@surnet.cl
обсуждение исходный текст
Ответ на PostgreSQL configurable SSL key checking  (Simon de Hartog <simon.postgresql@dehartog.nl>)
Ответы Re: PostgreSQL configurable SSL key checking  (Alvaro Herrera <alvherre@alvh.no-ip.org>)
Re: PostgreSQL configurable SSL key checking  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On Mon, Sep 05, 2005 at 09:03:06PM +0200, Simon de Hartog wrote:

> I have added all the users these applications run as to a group called
> "ssl". Permissions on the private key are owned by root, group ssl,
> protection rw-r----- (640). When I tell PostgreSQL to use this key with
> certificate (by using symlinks from server.key and server.crt in the
> postgreSQL data dir) it tells me that owner and permissions are wrong.
> 
> How can I use this certificate and key for PostgreSQL (without copying
> the key and changing owner and permissions etc, because then the whole
> idea of centrally coordinated certificates is gone)?

Did you try using a hardlink instead of a symlink?

-- 
Alvaro Herrera -- Valdivia, Chile         Architect, www.EnterpriseDB.com
"Ninguna manada de bestias tiene una voz tan horrible como la humana" (Orual)


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: PostgreSQL configurable SSL key checking
Следующее
От: Tom Lane
Дата:
Сообщение: Re: 4D Geometry