pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Mark Williams <markwillimas@gmail.com>
To: 'Wim Bertels' <wim.bertels@ucll.be>
To: pgsql-admin@lists.postgresql.org
To: s.dunand@sirap.fr
Subject: RE: Setting up SSL for postgre
Date: Mon, 20 Aug 2018 15:51:46 +0100
Message-ID: <077b01d43895$51aad620$f5008260$@gmail.com> (raw)
In-Reply-To: <1534771775784.73685@ucll.be>
References: <032401d43326$6c275d80$44761880$@gmail.com>
	<CALBNtw6-BnnA9AGpaTfSecSnjppLApaKTsYJ664HtfzBt14nRg@mail.gmail.com>
	<034901d4333f$d2aa7650$77ff62f0$@gmail.com>
	<CALBNtw7+xDCocj6M-K6mna4Ujresami2YfvdfVS0Q-q-B5PFTg@mail.gmail.com>
	<076401d43883$89ec6830$9dc53890$@gmail.com>
	<4ea1e251-0aa2-be17-4405-d1ccec951ecc@sirap.fr>
	<1534771775784.73685@ucll.be>

Hi,

 

Sorry I don’t understand what you are suggesting re the pg_hba file.

 

__

 

From: Wim Bertels <wim.bertels@ucll.be> 
Sent: 20 August 2018 14:30
To: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr
Subject: Re: Setting up SSL for postgre

 

 

 

pg_hba.conf

# TYPE  DATABASE        USER            CIDR-ADDRESS            METHOD

 

# IPv4 local & remote connections:

host    all             all             127.0.0.1/32            trust

hostssl all         postgres    0.0.0.0/0             cert 

 

cert method for auth, hence this behaviour (client cert..)

 

extra tip: 

https://duckduckgo.com/?q=letsencrypt+postgresql

for official server side certificates

 

mvg,

 Bertels Wim

 

Mark

__

 


This page helped me :
https://www.depesz.com/2015/05/11/how-to-setup-ssl-connections-and-authentic
ation/

Best regards,
Stéphane

view thread (22+ messages)  latest in thread

Message-ID: <077b01d43895$51aad620$f5008260$@gmail.com>
Permalink:  ../077b01d43895$51aad620$f5008260$@gmail.com/
Also on:    postgresql.org/message-id/077b01d43895$51aad620$f5008260$@gmail.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: markwillimas@gmail.com, wim.bertels@ucll.be, pgsql-admin@lists.postgresql.org, s.dunand@sirap.fr
  Subject: RE: Setting up SSL for postgre
  In-Reply-To: <077b01d43895$51aad620$f5008260$@gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox