On 12/17/2014 10:14 PM, harpagornis wrote:
> I am developing a Windows desktop application so the client is the desktop
> application. Depending on the installation, the app will be running in
> single user mode, with the server and client both on only one machine, using
> 127.0.0.1. In that type of installation, there is little or no reason the
> server and the client cannot share configuration files. Alternatively, the
> app could be installed for multiple users on a network server. Even in that
> type of installation, is there some reason that the client should never
> access server configuration files?
Yes, security. In any case for what you are trying to do the server
configuration is not something the client has to fool with.
>
> Regarding the search_path, when I connected with psql and certificates, I
> was only able to do so after I copied the certificates and keys into the
> Postgres folder located in the Roaming folder, located in the AppData
> folder, located in my Windows User name folder, located in the Windows
> system Users folder. I thought I read somewhere that particular folder
> derives from the search_path setting.
>
It is important to remember that SSL is not provided by Postgres, it
just has the ability to use SSL to make a connection. So it just
piggybacks on an existing program. In doing that it makes certain
assumptions to start with.
For server side:
http://www.postgresql.org/docs/9.3/static/ssl-tcp.html
For libpq clients:
http://www.postgresql.org/docs/9.3/static/libpq-ssl.html
Important the above is for libpq based clients such as psql. I am not
sure how non-libpq clients such as the Postgres JDBC client handle this.
The beginning assumptions can be modified by setting environment
variables(again this is for libpq clients):
http://www.postgresql.org/docs/9.3/static/libpq-envars.html
or the postgresql.conf
http://www.postgresql.org/docs/9.3/static/runtime-config-connection.html#RUNTIME-CONFIG-CONNECTION-SECURITY
For information on what search_path really does see:
http://www.postgresql.org/docs/9.3/static/runtime-config-client.html
>
>
>
> --
> View this message in context:
http://postgresql.nabble.com/SSL-Certificates-in-Windows-7-Postgres-9-3-tp5830749p5831232.html
> Sent from the PostgreSQL - general mailing list archive at Nabble.com.
>
>
--
Adrian Klaver
adrian.klaver@aklaver.com