Is Client connections via ca.crt only possible?

Поиск
Список
Период
Сортировка
От Rejo Oommen
Тема Is Client connections via ca.crt only possible?
Дата
Msg-id CAFiZ60hyT7wJ+jtSiJ3UjE92jCK43cqOF0cxmmkwq8Q+EnkSqw@mail.gmail.com
обсуждение исходный текст
Ответы Re: Is Client connections via ca.crt only possible?  (Thomas Guyot <tguyot@gmail.com>)
Список pgsql-general
Requirement is to use only ca.crt and connect to postgres

Server.crt, Server.key and ca.crt are configured at the postgres server for tls connection.

Connection successful while using 
psql ‘host=172.29.21.222 dbname=test user=postgres sslmode=verify-ca sslcert=/tmp/server.crt sslkey=/tmp/server.key sslrootcert=/tmp/ca.crt port=5432’

For clients to connect, can they use only ca.crt and connect to the DB. Tried and got the below error

psql ‘host=172.29.21.222 dbname=test user=postgres sslmode=verify-ca sslrootcert=/tmp/ca.crt port=5432’
psql: error: connection to server at “172.29.21.222”, port 50001 failed: FATAL:  connection requires a valid client certificate

В списке pgsql-general по дате отправления:

Предыдущее
От: Adrian Klaver
Дата:
Сообщение: Re: Connecting to postgres on OSX from Swift using PostgresClientKit
Следующее
От: Matthias Apitz
Дата:
Сообщение: a database can be created but not droped