From: "Mark Williams" <markwillimas@gmail.com>
To: "'Dai, Tino'" <tdai@loc.gov>,
	"'Tim Cross'" <theophilusx@gmail.com>
Cc: <pgsql-admin@lists.postgresql.org>,
	<s.dunand@sirap.fr>,
	"'Wim Bertels'" <wim.bertels@ucll.be>
References: <032401d43326$6c275d80$44761880$@gmail.com>
 <CALBNtw6-BnnA9AGpaTfSecSnjppLApaKTsYJ664HtfzBt14nRg@mail.gmail.com>
 <034901d4333f$d2aa7650$77ff62f0$@gmail.com>
 <CALBNtw7+xDCocj6M-K6mna4Ujresami2YfvdfVS0Q-q-B5PFTg@mail.gmail.com>
 <076401d43883$89ec6830$9dc53890$@gmail.com>
 <000e01d43e32$f35aad40$da1007c0$@gmail.com>
 <87efejihy9.fsf@gmail.com>,<013b01d43f00$527caf80$f7760e80$@gmail.com>
 <1535486102822.43883@loc.gov>
In-Reply-To: <1535486102822.43883@loc.gov>
Subject: RE: FW: Setting up SSL for postgre
Date: Wed, 29 Aug 2018 17:36:55 +0100
Message-ID: <01de01d43fb6$7feec820$7fcc5860$@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
Thread-Index: 
 AQJ64nPKQfAewiPZ9t7gQ7SiT+1fnwIMhi/1AcD6KUcCiXXq5QDWmBXZAcT4CjwCSq7bNgG5QIOHAnC1B7+jDm5SEA==
Content-Language: en-gb
Precedence: bulk

Hi Tino,

Thanks for the link. Unfortunately, it relates to a MS SQL server, which has
the TrustServerCertificate connection parameter. That doesn't exist for
Postgre.

But thanks anyway. Look like I will have to give up on Postgre after all!

Mark

__

-----Original Message-----
From: Dai, Tino <tdai@loc.gov> 
Sent: 28 August 2018 20:55
To: Mark Williams <markwillimas@gmail.com>; 'Tim Cross'
<theophilusx@gmail.com>
Cc: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr; 'Wim Bertels'
<wim.bertels@ucll.be>
Subject: Re: FW: Setting up SSL for postgre

Before you do give up on postgres, take a look at this. I'm not sure if you
have tried this:

https://stackoverflow.com/questions/16496199/firedac-sql-server-connection-u
ntrusted-certificate

-T
________________________________________
From: Mark Williams <markwillimas@gmail.com>
Sent: Tuesday, August 28, 2018 2:52 PM
To: 'Tim Cross'
Cc: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr; 'Wim Bertels'
Subject: RE: FW: Setting up SSL for postgre

Hi Tim,

Thanks for the reply.

Unfortunately, I don't know what private certificate authorisation is. I
assume this is different to SSL and is not the same as a self signed cert. I
have created my certificate with OpenSSL so I assume I am not in the arena
of private certificate authorisation.

Thanks for the tip re Debian, but sadly client and server are all Windows
machines.

I think I will put a plea out there to anyone who uses FireDAC and has
managed to get SSL working with Postgre. Absent anything useful there, I
will give up on Postgre.

All the best.

Mark

=