Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1frlYB-0003Ov-OP for pgsql-admin@arkaria.postgresql.org; Mon, 20 Aug 2018 14:53:00 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1frlYA-0004G1-G2 for pgsql-admin@arkaria.postgresql.org; Mon, 20 Aug 2018 14:52:58 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1frlX8-0007xg-4Q for pgsql-admin@lists.postgresql.org; Mon, 20 Aug 2018 14:51:54 +0000 Received: from mail-wm0-x241.google.com ([2a00:1450:400c:c09::241]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1frlX3-0003Rc-Ee for pgsql-admin@lists.postgresql.org; Mon, 20 Aug 2018 14:51:51 +0000 Received: by mail-wm0-x241.google.com with SMTP id s12-v6so14618230wmc.0 for ; Mon, 20 Aug 2018 07:51:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:references:in-reply-to:subject:date:message-id:mime-version :thread-index:content-language; bh=g7pLu7Wil8Nb8s7hMQBsuQsnrYpboiD3Or5tBwttnbg=; b=vIkzNWXASpLs/SLORl3KLSgNLQH3vZu4N8XluV/B8BQd1dg8mbKvckNwIss/J5cuzG 2wFHzyJURVfcYqWU2vVRgVwyuerqvu0WkrgJTtuvCHWv/ZF4n4KsUKlzWJdPqQXmNNRd pjtMDOLnqgwmGRhewee+dLWKbrOcVIyD1jUIVCeZLUEfOs1970mY76GtRL2XXi/4V+i9 LLmNoCdPOFCKXb3x+PnuwICWSUQ5/AB7IvyLNeYs9pSwhsUxN9UcoT6aWtW2Kz66Blq5 nKfjq3V38jrYkGr+gYv8y7NKL9Thh2s47NUvnKthjlZus0GRoYJcNXPkx74zSvZhhOwO zxSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:references:in-reply-to:subject:date :message-id:mime-version:thread-index:content-language; bh=g7pLu7Wil8Nb8s7hMQBsuQsnrYpboiD3Or5tBwttnbg=; b=TR41V3krifPGQTPKulrou8ol+36wxHjnepkrZq+tt+evrDPuAOicfbaFCc2KXTIhKZ rm5OvnT+ECjMvL5vnW7D5+OxXAYDmm/ihd9q8LJCh6YidVWu9EoGU5qvmFnCgZ6M1iO2 HU3sCk9o4wzI+oGPEurQDNDG72aGJoqOqE+E9gqbzZ5oCrPmhVMyjmgyrrZa330DBB5o NwK8dQ857/7E56mRk6gm/+luFaDYV3UW/g3VC7BFUIz5ctbaG5u26icKa6M/gYXQLs/1 Qzn9EUWv8OdSZo/1roClZmzKRWBznfDlKX0hFfcBuBPBGzsICaPW0mJPYAiaaq2A6n8H m0AQ== X-Gm-Message-State: APzg51DrhTWP+xPP6+WzNHBESTrKN+iStaVivsvgH72eQOl2fK6ltFPI Ed9SKm+NHL3CBxavHcrr68h9b36l X-Google-Smtp-Source: ANB0VdYEsYRKM4+dct6P/PfIF6PJz9dTUx6AXqoCWmL7g1hSk+2IJYO0P+5tYdWNR0bkNNicknqn9g== X-Received: by 2002:a1c:dac9:: with SMTP id r192-v6mr414192wmg.141.1534776707538; Mon, 20 Aug 2018 07:51:47 -0700 (PDT) Received: from LAPTOPE7EH7MDP (167.221-30-62.static.virginmediabusiness.co.uk. [62.30.221.167]) by smtp.gmail.com with ESMTPSA id o10-v6sm7570207wrw.79.2018.08.20.07.51.46 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 20 Aug 2018 07:51:46 -0700 (PDT) From: "Mark Williams" To: "'Wim Bertels'" , , References: <032401d43326$6c275d80$44761880$@gmail.com> <034901d4333f$d2aa7650$77ff62f0$@gmail.com> <076401d43883$89ec6830$9dc53890$@gmail.com>,<4ea1e251-0aa2-be17-4405-d1ccec951ecc@sirap.fr> <1534771775784.73685@ucll.be> In-Reply-To: <1534771775784.73685@ucll.be> Subject: RE: Setting up SSL for postgre Date: Mon, 20 Aug 2018 15:51:46 +0100 Message-ID: <077b01d43895$51aad620$f5008260$@gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_077C_01D4389D.B3700170" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJ64nPKQfAewiPZ9t7gQ7SiT+1fnwIMhi/1AcD6KUcCiXXq5QDWmBXZAZlEObIB3ICezKMmSu8A Content-Language: en-gb List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk This is a multipart message in MIME format. ------=_NextPart_000_077C_01D4389D.B3700170 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, =20 Sorry I don=92t understand what you are suggesting re the pg_hba file. =20 __ =20 From: Wim Bertels =20 Sent: 20 August 2018 14:30 To: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr Subject: Re: Setting up SSL for postgre =20 =20 =20 pg_hba.conf # TYPE DATABASE USER CIDR-ADDRESS METHOD =20 # IPv4 local & remote connections: host all all 127.0.0.1/32 trust hostssl all postgres 0.0.0.0/0 cert=20 =20 cert method for auth, hence this behaviour (client cert..) =20 extra tip:=20 https://duckduckgo.com/?q=3Dletsencrypt+postgresql for official server side certificates =20 mvg, Bertels Wim =20 Mark __ =20 This page helped me : https://www.depesz.com/2015/05/11/how-to-setup-ssl-connections-and-authen= tic ation/ Best regards, St=E9phane ------=_NextPart_000_077C_01D4389D.B3700170 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi,

 

Sorry I = don’t understand what you are suggesting re the pg_hba = file.

 

__

 

From: Wim Bertels = <wim.bertels@ucll.be>
Sent: 20 August 2018 = 14:30
To: pgsql-admin@lists.postgresql.org; = s.dunand@sirap.fr
Subject: Re: Setting up SSL for = postgre

 

 

<= div>

 

pg_hba.conf

# TYPE  = DATABASE        = USER            = CIDR-ADDRESS       =      METHOD

 

# IPv4 local & remote = connections:

host    = all           &nbs= p; = all           &nbs= p; = 127.0.0.1/32          &= nbsp; trust

hostssl = all         = postgres    = 0.0.0.0/0          &nbs= p;  cert

 

cert method for auth, hence = this behaviour (client cert..)

 

extra tip: =

https://duckd= uckgo.com/?q=3Dletsencrypt+postgresql

for official server side = certificates

 

mvg,

 Bertels = Wim

 

Mark

<= p class=3DMsoNormal = style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>__

 


This page helped me :
https://www.depesz.com/2015/05/11/how-to-setup-ssl-con= nections-and-authentication/

Best = regards,
St=E9phane

------=_NextPart_000_077C_01D4389D.B3700170--