pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedSteps to enable SSL Enable
9+ messages / 5 participants
[nested] [flat]
* Steps to enable SSL Enable
@ 2021-12-21 13:36 Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
0 siblings, 1 reply; 9+ messages in thread
From: Daulat @ 2021-12-21 13:36 UTC (permalink / raw)
To: pgsql-admin <pgsql-admin@lists.postgresql.org>
Hello Team,
Anyone can suggest all the steps and prerequisites to enable ssl in
postgres.
We have a .pem and .key file for the Postgres server. Will it be useful
here?
Thanks,
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
@ 2021-12-21 13:54 ` Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
0 siblings, 1 reply; 9+ messages in thread
From: Holger Jakobs @ 2021-12-21 13:54 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
Am 21.12.21 um 14:36 schrieb Daulat:
> Hello Team,
>
> Anyone can suggest all the steps and prerequisites to enable ssl in
> postgres.
> We have a .pem and .key file for the Postgres server. Will it be
> useful here?
>
> Thanks,
>
>
Set ssl = on, save your .pem and .key files where the lines following
the "ssl = on" line expects them
or set the paths to these files.
On Debian or Ubuntu SSL is configured right from the start. In other
distributions or Windows, it's your own responsibility to set it up as
described.
--
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
Attachments:
OpenPGP_signature (application/pgp-signature, 202B) download
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
@ 2021-12-21 15:41 ` Daulat <daulat.dba@gmail.com>
2021-12-21 15:44 ` Re: Steps to enable SSL Enable Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 1 reply; 9+ messages in thread
From: Daulat @ 2021-12-21 15:41 UTC (permalink / raw)
To: Holger Jakobs <holger@jakobs.com>; +Cc: pgsql-admin <pgsql-admin@lists.postgresql.org>
Thanks Holger,
I am getting error "waiting for server to start....2021-12-21 15:40:17.076
UTC [5040] LOG: SSL is not supported by this build"
On Tue, Dec 21, 2021 at 7:24 PM Holger Jakobs <holger@jakobs.com> wrote:
>
> Am 21.12.21 um 14:36 schrieb Daulat:
> > Hello Team,
> >
> > Anyone can suggest all the steps and prerequisites to enable ssl in
> > postgres.
> > We have a .pem and .key file for the Postgres server. Will it be
> > useful here?
> >
> > Thanks,
> >
> >
> Set ssl = on, save your .pem and .key files where the lines following
> the "ssl = on" line expects them
> or set the paths to these files.
>
> On Debian or Ubuntu SSL is configured right from the start. In other
> distributions or Windows, it's your own responsibility to set it up as
> described.
>
> --
> Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
>
>
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
@ 2021-12-21 15:44 ` Tom Lane <tgl@sss.pgh.pa.us>
2022-03-07 10:25 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
0 siblings, 1 reply; 9+ messages in thread
From: Tom Lane @ 2021-12-21 15:44 UTC (permalink / raw)
To: Daulat <daulat.dba@gmail.com>; +Cc: Holger Jakobs <holger@jakobs.com>; pgsql-admin <pgsql-admin@lists.postgresql.org>
Daulat <daulat.dba@gmail.com> writes:
> I am getting error "waiting for server to start....2021-12-21 15:40:17.076
> UTC [5040] LOG: SSL is not supported by this build"
In that case you need to recompile with --with-openssl.
regards, tom lane
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 15:44 ` Re: Steps to enable SSL Enable Tom Lane <tgl@sss.pgh.pa.us>
@ 2022-03-07 10:25 ` Daulat <daulat.dba@gmail.com>
2022-03-07 14:52 ` Re: Steps to enable SSL Enable Bruce Momjian <bruce@momjian.us>
0 siblings, 1 reply; 9+ messages in thread
From: Daulat @ 2022-03-07 10:25 UTC (permalink / raw)
To: Tom Lane <tgl@sss.pgh.pa.us>; +Cc: Holger Jakobs <holger@jakobs.com>; pgsql-admin <pgsql-admin@lists.postgresql.org>
Thanks Tom,
If I do the "openssl version" , it looks like it is already installed.
$ openssl version
OpenSSL 1.0.2k-fips 26 Jan 2017
On Tue, Dec 21, 2021 at 9:14 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Daulat <daulat.dba@gmail.com> writes:
> > I am getting error "waiting for server to start....2021-12-21
> 15:40:17.076
> > UTC [5040] LOG: SSL is not supported by this build"
>
> In that case you need to recompile with --with-openssl.
>
> regards, tom lane
>
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 15:44 ` Re: Steps to enable SSL Enable Tom Lane <tgl@sss.pgh.pa.us>
2022-03-07 10:25 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
@ 2022-03-07 14:52 ` Bruce Momjian <bruce@momjian.us>
2022-03-07 18:22 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
0 siblings, 1 reply; 9+ messages in thread
From: Bruce Momjian @ 2022-03-07 14:52 UTC (permalink / raw)
To: Daulat <daulat.dba@gmail.com>; +Cc: Tom Lane <tgl@sss.pgh.pa.us>; Holger Jakobs <holger@jakobs.com>; pgsql-admin <pgsql-admin@lists.postgresql.org>
On Mon, Mar 7, 2022 at 03:55:41PM +0530, Daulat wrote:
> Thanks Tom,
> If I do the "openssl version" , it looks like it is already installed.
>
> $ openssl version
> OpenSSL 1.0.2k-fips 26 Jan 2017
Uh, that means you have OpenSSL installed on the server, not that
Postgres is built to support SSL.
---------------------------------------------------------------------------
>
>
>
> On Tue, Dec 21, 2021 at 9:14 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
>
> Daulat <daulat.dba@gmail.com> writes:
> > I am getting error "waiting for server to start....2021-12-21
> 15:40:17.076
> > UTC [5040] LOG: SSL is not supported by this build"
>
> In that case you need to recompile with --with-openssl.
>
> regards, tom lane
>
--
Bruce Momjian <bruce@momjian.us> https://momjian.us
EDB https://enterprisedb.com
If only the physical world exists, free will is an illusion.
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 15:44 ` Re: Steps to enable SSL Enable Tom Lane <tgl@sss.pgh.pa.us>
2022-03-07 10:25 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2022-03-07 14:52 ` Re: Steps to enable SSL Enable Bruce Momjian <bruce@momjian.us>
@ 2022-03-07 18:22 ` Daulat <daulat.dba@gmail.com>
2022-03-09 07:41 ` Re: Steps to enable SSL Enable Ganesh Korde <ganeshakorde@gmail.com>
0 siblings, 1 reply; 9+ messages in thread
From: Daulat @ 2022-03-07 18:22 UTC (permalink / raw)
To: Bruce Momjian <bruce@momjian.us>; +Cc: Tom Lane <tgl@sss.pgh.pa.us>; Holger Jakobs <holger@jakobs.com>; pgsql-admin <pgsql-admin@lists.postgresql.org>
Ok, thanks. Then what is the solution please.
On Mon, Mar 7, 2022 at 8:22 PM Bruce Momjian <bruce@momjian.us> wrote:
> On Mon, Mar 7, 2022 at 03:55:41PM +0530, Daulat wrote:
> > Thanks Tom,
> > If I do the "openssl version" , it looks like it is already installed.
> >
> > $ openssl version
> > OpenSSL 1.0.2k-fips 26 Jan 2017
>
> Uh, that means you have OpenSSL installed on the server, not that
> Postgres is built to support SSL.
>
> ---------------------------------------------------------------------------
>
> >
> >
> >
> > On Tue, Dec 21, 2021 at 9:14 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> >
> > Daulat <daulat.dba@gmail.com> writes:
> > > I am getting error "waiting for server to start....2021-12-21
> > 15:40:17.076
> > > UTC [5040] LOG: SSL is not supported by this build"
> >
> > In that case you need to recompile with --with-openssl.
> >
> > regards, tom lane
> >
>
> --
> Bruce Momjian <bruce@momjian.us> https://momjian.us
> EDB https://enterprisedb.com
>
> If only the physical world exists, free will is an illusion.
>
>
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 15:44 ` Re: Steps to enable SSL Enable Tom Lane <tgl@sss.pgh.pa.us>
2022-03-07 10:25 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2022-03-07 14:52 ` Re: Steps to enable SSL Enable Bruce Momjian <bruce@momjian.us>
2022-03-07 18:22 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
@ 2022-03-09 07:41 ` Ganesh Korde <ganeshakorde@gmail.com>
2022-03-09 16:14 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
0 siblings, 1 reply; 9+ messages in thread
From: Ganesh Korde @ 2022-03-09 07:41 UTC (permalink / raw)
To: Daulat <daulat.dba@gmail.com>; +Cc: Bruce Momjian <bruce@momjian.us>; Tom Lane <tgl@sss.pgh.pa.us>; Holger Jakobs <holger@jakobs.com>; pgsql-admin <pgsql-admin@lists.postgresql.org>
Compile PostgreSQL source with openssl option.
Regards,
Ganesh Korde.
On Mon, 7 Mar 2022, 11:52 pm Daulat, <daulat.dba@gmail.com> wrote:
> Ok, thanks. Then what is the solution please.
>
> On Mon, Mar 7, 2022 at 8:22 PM Bruce Momjian <bruce@momjian.us> wrote:
>
>> On Mon, Mar 7, 2022 at 03:55:41PM +0530, Daulat wrote:
>> > Thanks Tom,
>> > If I do the "openssl version" , it looks like it is already installed.
>> >
>> > $ openssl version
>> > OpenSSL 1.0.2k-fips 26 Jan 2017
>>
>> Uh, that means you have OpenSSL installed on the server, not that
>> Postgres is built to support SSL.
>>
>>
>> ---------------------------------------------------------------------------
>>
>> >
>> >
>> >
>> > On Tue, Dec 21, 2021 at 9:14 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> >
>> > Daulat <daulat.dba@gmail.com> writes:
>> > > I am getting error "waiting for server to start....2021-12-21
>> > 15:40:17.076
>> > > UTC [5040] LOG: SSL is not supported by this build"
>> >
>> > In that case you need to recompile with --with-openssl.
>> >
>> > regards, tom lane
>> >
>>
>> --
>> Bruce Momjian <bruce@momjian.us> https://momjian.us
>> EDB https://enterprisedb.com
>>
>> If only the physical world exists, free will is an illusion.
>>
>>
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: Steps to enable SSL Enable
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Re: Steps to enable SSL Enable Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 15:44 ` Re: Steps to enable SSL Enable Tom Lane <tgl@sss.pgh.pa.us>
2022-03-07 10:25 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2022-03-07 14:52 ` Re: Steps to enable SSL Enable Bruce Momjian <bruce@momjian.us>
2022-03-07 18:22 ` Re: Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2022-03-09 07:41 ` Re: Steps to enable SSL Enable Ganesh Korde <ganeshakorde@gmail.com>
@ 2022-03-09 16:14 ` Daulat <daulat.dba@gmail.com>
0 siblings, 0 replies; 9+ messages in thread
From: Daulat @ 2022-03-09 16:14 UTC (permalink / raw)
To: Ganesh Korde <ganeshakorde@gmail.com>; +Cc: Bruce Momjian <bruce@momjian.us>; Tom Lane <tgl@sss.pgh.pa.us>; Holger Jakobs <holger@jakobs.com>; pgsql-admin <pgsql-admin@lists.postgresql.org>
Hi Ganesh,
I have tried to compile it but no success.
sudo ./configure --prefix= /opt/PostgreSQL-10/bin --with-openssl
--with-includes=/opt/PostgreSQL-10/include/openssl
--with-libraries=/opt/PostgreSQL-10/lib
Could you please suggest how we can achieve it.
On Wed, Mar 9, 2022 at 1:11 PM Ganesh Korde <ganeshakorde@gmail.com> wrote:
> Compile PostgreSQL source with openssl option.
>
> Regards,
> Ganesh Korde.
>
> On Mon, 7 Mar 2022, 11:52 pm Daulat, <daulat.dba@gmail.com> wrote:
>
>> Ok, thanks. Then what is the solution please.
>>
>> On Mon, Mar 7, 2022 at 8:22 PM Bruce Momjian <bruce@momjian.us> wrote:
>>
>>> On Mon, Mar 7, 2022 at 03:55:41PM +0530, Daulat wrote:
>>> > Thanks Tom,
>>> > If I do the "openssl version" , it looks like it is already installed.
>>> >
>>> > $ openssl version
>>> > OpenSSL 1.0.2k-fips 26 Jan 2017
>>>
>>> Uh, that means you have OpenSSL installed on the server, not that
>>> Postgres is built to support SSL.
>>>
>>>
>>> ---------------------------------------------------------------------------
>>>
>>> >
>>> >
>>> >
>>> > On Tue, Dec 21, 2021 at 9:14 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
>>> >
>>> > Daulat <daulat.dba@gmail.com> writes:
>>> > > I am getting error "waiting for server to start....2021-12-21
>>> > 15:40:17.076
>>> > > UTC [5040] LOG: SSL is not supported by this build"
>>> >
>>> > In that case you need to recompile with --with-openssl.
>>> >
>>> > regards, tom lane
>>> >
>>>
>>> --
>>> Bruce Momjian <bruce@momjian.us> https://momjian.us
>>> EDB https://enterprisedb.com
>>>
>>> If only the physical world exists, free will is an illusion.
>>>
>>>
^ permalink raw reply [nested|flat] 9+ messages in thread
end of thread, other threads:[~2022-03-09 16:14 UTC | newest]
Thread overview: 9+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2021-12-21 13:36 Steps to enable SSL Enable Daulat <daulat.dba@gmail.com>
2021-12-21 13:54 ` Holger Jakobs <holger@jakobs.com>
2021-12-21 15:41 ` Daulat <daulat.dba@gmail.com>
2021-12-21 15:44 ` Tom Lane <tgl@sss.pgh.pa.us>
2022-03-07 10:25 ` Daulat <daulat.dba@gmail.com>
2022-03-07 14:52 ` Bruce Momjian <bruce@momjian.us>
2022-03-07 18:22 ` Daulat <daulat.dba@gmail.com>
2022-03-09 07:41 ` Ganesh Korde <ganeshakorde@gmail.com>
2022-03-09 16:14 ` Daulat <daulat.dba@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox