Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fpG7y-0001ow-VY for pgsql-admin@arkaria.postgresql.org; Mon, 13 Aug 2018 16:55:35 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fpG7x-0006hs-5x for pgsql-admin@arkaria.postgresql.org; Mon, 13 Aug 2018 16:55:33 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fpG7w-0006hk-KD for pgsql-admin@lists.postgresql.org; Mon, 13 Aug 2018 16:55:32 +0000 Received: from mail-wm0-x233.google.com ([2a00:1450:400c:c09::233]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1fpG7p-0007zP-7G for pgsql-admin@lists.postgresql.org; Mon, 13 Aug 2018 16:55:31 +0000 Received: by mail-wm0-x233.google.com with SMTP id s9-v6so9569046wmh.3 for ; Mon, 13 Aug 2018 09:55:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:message-id:mime-version:thread-index :content-language; bh=xzttu1V5yx2OnF6ou46cgSQ5VvrsiUIqgsHS9JTM/yQ=; b=OFlXcOrEFc8QFFa+ZQJ12EIlvoMl5jah9Uh7wdnIaX5w5VVTyTFMx5baPvoBVqy++9 b8pUeMeWadzAK0g5Mx7DFiG2chMjTO5lmRCMcm5aJHtubK9K/s5J50ycFJ7CukKY3LOv WModTcd0nr4Md+pkTa1TY8NEBW42IalMooviTNrKs5e1XK7WJIhn0ISrsI+RRSQs+hxm Yp8/SmCUCj9vVEUhNjTj7aN4p7MIMHQVL/s1KbfneGJ2BTuGfkoARrgRptMWZxi6/2MQ LHO8kYKGG+1fjqHHQ3G6NcZCQbl1RqMV9Urdy3LnNEwbop9gBwQEm29WeAS9lFBKD7xb 5EqA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :thread-index:content-language; bh=xzttu1V5yx2OnF6ou46cgSQ5VvrsiUIqgsHS9JTM/yQ=; b=K7X/MkcWcHMWd0OYRk/5Ox5ijjMtgLwe1xH/C5tBwysd9JFLMUPLV8KZcOr2qMjYbP aW7i1qISLY1hZzSZBcvjPFFyfKCqZzAstDaqYeKZmvJLuVp6OoS6H4IIvhEmS9KcWT5a oUeicm0M0HhdKxfeso0TxQNpUyQCEccF5knPhGUDI0gt1nOsGBAugWWyhXYNHIVGSL1j rzL4U5fDD+yQkIkngcS5CHmHO86spfiKsJYQMcaWSSjFgxjX0VKc9ffnj3KzhC441Yoh DK5YzItnuMWoYjWNUmL5gJu5jWOsm2hmbfoxvIf2vx+hS+lJrJVadiU4WVwnZREpgwt2 PQbQ== X-Gm-Message-State: AOUpUlH5YC72Xgp7lHYabuWP2X6Exv3M8lMcquUwFlVKlWtTdOA6nLCn Nz3rbOCR5cdwtSgeHu+E+0JrGD3Z X-Google-Smtp-Source: AA+uWPz4O3sn3j5yGdy2mimwmA7UOIiRMoum4XYRgJqgL84stY4Q1KFBw2JceufK/3uiDkUUmmUj8Q== X-Received: by 2002:a1c:4d09:: with SMTP id o9-v6mr9400218wmh.111.1534179321258; Mon, 13 Aug 2018 09:55:21 -0700 (PDT) Received: from LAPTOPE7EH7MDP (167.221-30-62.static.virginmediabusiness.co.uk. [62.30.221.167]) by smtp.gmail.com with ESMTPSA id q188-v6sm19648345wmd.36.2018.08.13.09.55.20 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 13 Aug 2018 09:55:20 -0700 (PDT) From: "Mark Williams" To: Subject: Setting up SSL for postgre Date: Mon, 13 Aug 2018 17:55:20 +0100 Message-ID: <032401d43326$6c275d80$44761880$@gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0325_01D4332E.CDEC61C0" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdQzJUyyKwMbkNDLR/2p5vR/yPzc5w== Content-Language: en-gb List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk This is a multipart message in MIME format. ------=_NextPart_000_0325_01D4332E.CDEC61C0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I am new to Postgre. Migrating from MySQL. I am trying to connect via SSL to a PostgreSQL using FireDac in Delphi. I have followed the instructions at the following site: https://www.howtoforge.com/postgresql-ssl-certificates to create my self-certified certificates and configure the config files. I have coped the specified files to the client machine and installed the root.crt certificate. Via FireDAC's connection params I have specified the following: Params.values[SSL_ca']:=sslCertsPath+'root.crt'; Params.values['SSL_cert']:=sslCertsPath+'postgresql.crt.'; Params.values['SSL_key']:=sslCertsPath+'postgresql.key'; I am getting a connection error re invalid client certificate. I have used OpenSSL to verify against the root.crt and postgresql.crt and this confirms the certificate is ok. Mark __ ------=_NextPart_000_0325_01D4332E.CDEC61C0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I= am new to Postgre. Migrating from MySQL.

<= o:p> 

I= am trying to connect via SSL to a PostgreSQL using FireDac in Delphi. I = have followed the instructions at the following site: https://www.howtoforge.com/postgresql-ssl-certificates= to create my self-certified certificates and configure the = config files.

<= o:p> 

I= have coped the specified files to the client machine and installed the = root.crt certificate.

V= ia FireDAC's connection params I have specified the = following:

Params.values[SSL_ca']:=3DsslCertsPath+'<=
span class=3Dpln>root.crt';
Params.values['SSL_cert']:=3DsslCertsPath+'<= span class=3Dpln>postgresql.crt.';Params.values['SSL_key']:=3DsslCertsPath+'<= span class=3Dpln>postgresql.key';

<= o:p> 

I= am getting a connection error re invalid client certificate. =

I= have used OpenSSL to verify against the root.crt and postgresql.crt =  and this confirms the certificate is ok.

Mark

 

__

 

------=_NextPart_000_0325_01D4332E.CDEC61C0--