I know that some SSL stuff was corrected between beta2 and beta3. I've been
getting an error at postmaster startup, but don't know enough about SSL to
determine if it is ok. Encryption seems to be working (which is all I care
about).
The error in the serverlog is:
LOG: could not load root certificate file
"/database/local/pgsql/data/root.crt": No such file or directory
DETAIL: Will not verify client certificates.
LOG: database system was shut down at 2004-10-09 10:50:50 CEST
LOG: checkpoint record is at 0/464C90C
LOG: redo record is at 0/464C90C; undo record is at 0/0; shutdown TRUE
LOG: next transaction ID: 39081; next OID: 21438
LOG: database system is ready
The SSL certificate (server.crt) was made following the instructions in the
Postgres documentation. Note, that root.crt is not specified in this
documentation. I'm not sure if the file needs to be called 'root.crt' or
'server.crt'. Simply renaming the file doesn't work as I get an error:
psql: SSL error: sslv3 alert handshake failure
I'm sure this is just a misunderstanding on my part, but thought it could be
spelled out a little better in the on-line documentation.
-Tony
Setup: PostgreSQL 8.0.0beta3 on i686-pc-linux-gnu, compiled by GCC gcc
(GCC) 3.3.2 20031022 (Red Hat Linux 3.3.2-1) (Fedora Core 1)
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
hthttp://messenger.msn.click-url.com/go/onm00200471ave/direct/01/