pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Mark Williams <markwillimas@gmail.com>
To: pgsql-admin@lists.postgresql.org
Subject: Setting up SSL for postgre
Date: Mon, 13 Aug 2018 17:55:20 +0100
Message-ID: <032401d43326$6c275d80$44761880$@gmail.com> (raw)

I am new to Postgre. Migrating from MySQL.

 

I am trying to connect via SSL to a PostgreSQL using FireDac in Delphi. I
have followed the instructions at the following site:
<https://www.howtoforge.com/postgresql-ssl-certificates;
https://www.howtoforge.com/postgresql-ssl-certificates to create my
self-certified certificates and configure the config files.

 

I have coped the specified files to the client machine and installed the
root.crt certificate.

Via FireDAC's connection params I have specified the following:

Params.values[SSL_ca']:=sslCertsPath+'root.crt';
Params.values['SSL_cert']:=sslCertsPath+'postgresql.crt.';
Params.values['SSL_key']:=sslCertsPath+'postgresql.key';

 

I am getting a connection error re invalid client certificate. 

I have used OpenSSL to verify against the root.crt and postgresql.crt  and
this confirms the certificate is ok.

Mark

 

__

 

view thread (22+ messages)  latest in thread

Message-ID: <032401d43326$6c275d80$44761880$@gmail.com>
Permalink:  ../032401d43326$6c275d80$44761880$@gmail.com/
Also on:    postgresql.org/message-id/032401d43326$6c275d80$44761880$@gmail.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: markwillimas@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: Setting up SSL for postgre
  In-Reply-To: <032401d43326$6c275d80$44761880$@gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox