From: Alastair D'Silva <deece@newmillennium.net.au>
To: pgsql-admin@postgresql.org
Subject: SSL problems
Date: Thu, 11 Apr 2002 17:31:49 +1000
Message-ID: <010301c1e12a$f1753170$3200a8c0@riker> (raw)
I've been busy trying to get Bind9 running smoothly with an SSL
connection to a PostgreSQL database. Running it from one computer
(FreeBSD 4.5-STABLE) across the Internet to the server works fine, but
running Bind9 on the same computer as the server (FreeBSD
4.5-RELEASE-p2) fails, with the error generated from the pq library:
"Could not establish SSL connection: No SSL error reported".
I can telnet to the PostgreSQL port fine, so its not a firewalling
issue, and disabling SSL in postgresql.conf remedies the problem
(although it means my remote connections are no longer encrypted). Yes,
I am aware that I could tunnel the remote connections via SSH, but I'd
rather have the native SSL support.
On a somewhat related note, is it possible to disable SSL for certain ip
address, while enabling it for others? The reason for this is that there
will be some remote and some local TCP connections, and I can see no
reason for encrypting the local TCP connections.
--
Alastair D'Silva B. Sc. mob: 0413 485 733
Networking Consultant
New Millennium Networking http://www.newmillennium.net.au
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: deece@newmillennium.net.au
Subject: Re: SSL problems
In-Reply-To: <010301c1e12a$f1753170$3200a8c0@riker>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox