Re: Any advantage of using SSL with a certificate of authority?
От
Bruce Momjian
Тема
Re: Any advantage of using SSL with a certificate of
authority?
Дата
Msg-id
20131126191230.GB6323@momjian.us
Ответ на
Re: Any advantage of using SSL with a certificate of authority? (John R Pierce)
Список
Дерево обсуждения
Any advantage of using SSL with a certificate of authority? Jesus Rafael Sanchez Medrano <jesusrafael@gmail.com>
Re: Any advantage of using SSL with a certificate of
authority? Bruce Momjian <bruce@momjian.us>
Re: Any advantage of using SSL with a certificate of authority? Vick Khera <vivek@khera.org>
Re: Any advantage of using SSL with a certificate of
authority? Andrew Sullivan <ajs@crankycanuck.ca>
Re: Any advantage of using SSL with a certificate of authority? Robin <robinstc@live.co.uk>
Re: Any advantage of using SSL with a certificate of authority? John R Pierce <pierce@hogranch.com>
Re: Any advantage of using SSL with a certificate of
authority? Bruce Momjian <bruce@momjian.us>
Re: Any advantage of using SSL with a certificate of authority? Vick Khera <vivek@khera.org>
Re: Any advantage of using SSL with a certificate of authority? John R Pierce <pierce@hogranch.com>
Re: Any advantage of using SSL with a certificate of
authority? Bruce Momjian <bruce@momjian.us>
On Tue, Nov 26, 2013 at 10:33:47AM -0800, John R Pierce wrote: > On 11/26/2013 10:24 AM, Jesus Rafael Sanchez Medrano wrote: > > Looking to implement SSL. Every tutorial/sample I have found uses self > signed certificates. Would there be any advantage of using a certificate > from a CA such as digicertor rapidssl? > > > > depends entirely on your use case. generally, since you control both ends of > a postgresql connection, there's no advantage to using signed certificates, but > if you have your own CA already, by all means go ahead and use it. Yes, definately use your private CA so you can verify the chain. It is public CAs that are not useful in this case. -- Bruce Momjian http://momjian.us EnterpriseDB http://enterprisedb.com + Everyone has their own god. +
В списке pgsql-general по дате отправления