Обсуждение: Fwd: ssl database connection problems...

On Wed, Dec 31, 2008 at 11:16:42AM -0500, Carol Walter wrote:
>> On the web site you directed me to, the s_server command uses a file
>> called 'mycert.pem'.  Do you know what the system expecting for this file?

It's just a file and you tell openssl where it is, where you put it
once it is created.  You request this file from your CA (certificate
authority) who will provide you with the root.crt, the public side of
the chain.  You can generate your own with openssl.   Here's a great
demo: http://www.madboa.com/geek/openssl/#cert

Well, back from the flu.  =P

How do I tell postgres where to look for ssl.  I've got both the new
and the original versions of openssl.  I don't want to remove the
original one because it's loaded on the global zone and I don't know
what other dependencies it might have.  Do I have to back everything
out and run ./configure again?  I don't see a parm in postgresql.conf.

Thanks,
Carol

On Dec 31, 2008, at 4:08 PM, Ray Stell wrote:

> On Wed, Dec 31, 2008 at 11:16:42AM -0500, Carol Walter wrote:
>>> On the web site you directed me to, the s_server command uses a file
>>> called 'mycert.pem'.  Do you know what the system expecting for
>>> this file?
>
> It's just a file and you tell openssl where it is, where you put it
> once it is created.  You request this file from your CA (certificate
> authority) who will provide you with the root.crt, the public side of
> the chain.  You can generate your own with openssl.   Here's a great
> demo: http://www.madboa.com/geek/openssl/#cert
>

./configure --prefix=/usr/local/pgsql826 --with-libraries=/usr/local/openssl/lib
--with-includes=/usr/local/openssl/include/ --with-openssl  


On Fri, Jan 09, 2009 at 03:47:54PM -0500, Carol Walter wrote:
> Well, back from the flu.  =P
>
> How do I tell postgres where to look for ssl.  I've got both the new and
> the original versions of openssl.  I don't want to remove the original one
> because it's loaded on the global zone and I don't know what other
> dependencies it might have.  Do I have to back everything out and run
> ./configure again?  I don't see a parm in postgresql.conf.
>
> Thanks,
> Carol
>
> On Dec 31, 2008, at 4:08 PM, Ray Stell wrote:
>
>> On Wed, Dec 31, 2008 at 11:16:42AM -0500, Carol Walter wrote:
>>>> On the web site you directed me to, the s_server command uses a file
>>>> called 'mycert.pem'.  Do you know what the system expecting for this
>>>> file?
>>
>> It's just a file and you tell openssl where it is, where you put it
>> once it is created.  You request this file from your CA (certificate
>> authority) who will provide you with the root.crt, the public side of
>> the chain.  You can generate your own with openssl.   Here's a great
>> demo: http://www.madboa.com/geek/openssl/#cert
>>
>
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin

On Fri, Jan 09, 2009 at 04:08:00PM -0500, Ray Stell wrote:
> ./configure --prefix=/usr/local/pgsql826 --with-libraries=/usr/local/openssl/lib
--with-includes=/usr/local/openssl/include/ --with-openssl  
>
>
> On Fri, Jan 09, 2009 at 03:47:54PM -0500, Carol Walter wrote:
> > Well, back from the flu.  =P

sorry for the unsupported top post, I forgot where I was.

sorry about the flu, I did that the week of Dec 16.  I think
I lost some weight...


> > How do I tell postgres where to look for ssl.  I've got both the new and
> > the original versions of openssl.  I don't want to remove the original one

./configure --prefix=/usr/local/pgsql826 --with-libraries=/usr/local/openssl/lib
--with-includes=/usr/local/openssl/include/ --with-openssl