pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedYum Install postgresql93 with SSL
5+ messages / 3 participants
[nested] [flat]
* Yum Install postgresql93 with SSL
@ 2014-12-15 17:58 Kido Kouassi <jjkido@gmail.com>
2014-12-15 18:10 ` Re: Yum Install postgresql93 with SSL John Scalia <jayknowsunix@gmail.com>
0 siblings, 1 reply; 5+ messages in thread
From: Kido Kouassi @ 2014-12-15 17:58 UTC (permalink / raw)
To: pgsql-admin
Hello Admins,
I am looking to Install PostgreSQL using the Yum Install on CentOS 6 With
support for SSL but is is not working.
My question is: am I doing it wrong or the only way to have SSL support is
to build from source?
Here is what I did:
I used the following sequence to install
1- yum install postgresql93-server.x86_64 postgresql93-jdbc.x86_64
postgresql93.x86_64 postgresql93-contrib.x86_64 postgresql93-pltcl.x86_64
postgresql93-plpython.x86_64 postgresql93-odbc.x86_64
postgresql93-libs.x86_64
2- service postgresql-9.3 initdb
3- service postgresql-9.3 start
at the first try database started with no issue,
then I copied the Cert and keys files, to the data folder,
modified the postgresql.conf with
ssl = on
#ssl_ciphers = 'DEFAULT:!LOW:!EXP:!MD5:@STRENGTH'
#ssl_renegotiation_limit = 512MB
ssl_cert_file = 'server.crt'
ssl_key_file = 'server.key'
ssl_ca_file = 'root.crt'
#ssl_crl_file = ''
After this I change ownership of the whole data folder to postgres user and
restarted the service.
1- The service did not start
2- Nothing was logged in the log file.
Thank you in advance for your help,
--Kido K
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Yum Install postgresql93 with SSL
2014-12-15 17:58 Yum Install postgresql93 with SSL Kido Kouassi <jjkido@gmail.com>
@ 2014-12-15 18:10 ` John Scalia <jayknowsunix@gmail.com>
2014-12-15 18:17 ` Re: Yum Install postgresql93 with SSL Tom Lane <tgl@sss.pgh.pa.us>
2014-12-15 18:23 ` Re: Yum Install postgresql93 with SSL Kido Kouassi <jjkido@gmail.com>
0 siblings, 2 replies; 5+ messages in thread
From: John Scalia @ 2014-12-15 18:10 UTC (permalink / raw)
To: Kido Kouassi <jjkido@gmail.com>; pgsql-admin
Not absolutely certain, but you may need to use an explicit path to those SSL files. Something like "/var/lib/pgsql/9.3/data/server.crt", etc...
--
Jay
On 12/15/2014 12:58 PM, Kido Kouassi wrote:
> Hello Admins,
>
> I am looking to Install PostgreSQL using the Yum Install on CentOS 6 With support for SSL but is is not working.
>
> My question is: am I doing it wrong or the only way to have SSL support is to build from source?
>
> Here is what I did:
>
> I used the following sequence to install
>
> 1- yum install postgresql93-server.x86_64 postgresql93-jdbc.x86_64 postgresql93.x86_64 postgresql93-contrib.x86_64 postgresql93-pltcl.x86_64 postgresql93-plpython.x86_64
> postgresql93-odbc.x86_64 postgresql93-libs.x86_64
>
> 2- service postgresql-9.3 initdb
>
> 3-service postgresql-9.3 start
>
> at the first try database started with no issue,
>
> then I copied the Cert and keys files, to the data folder,
>
> modified the postgresql.conf with
>
> ssl = on
> #ssl_ciphers = 'DEFAULT:!LOW:!EXP:!MD5:@STRENGTH'
>
> #ssl_renegotiation_limit = 512MB
> ssl_cert_file = 'server.crt'
> ssl_key_file = 'server.key'
> ssl_ca_file = 'root.crt'
> #ssl_crl_file = ''
>
> After this I change ownership of the whole data folder to postgres user and restarted the service.
>
>
> 1- The service did not start
>
> 2- Nothing was logged in the log file.
>
>
>
> Thank you in advance for your help,
>
>
> --Kido K
>
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Yum Install postgresql93 with SSL
2014-12-15 17:58 Yum Install postgresql93 with SSL Kido Kouassi <jjkido@gmail.com>
2014-12-15 18:10 ` Re: Yum Install postgresql93 with SSL John Scalia <jayknowsunix@gmail.com>
@ 2014-12-15 18:17 ` Tom Lane <tgl@sss.pgh.pa.us>
2014-12-15 18:30 ` Re: Yum Install postgresql93 with SSL Kido Kouassi <jjkido@gmail.com>
1 sibling, 1 reply; 5+ messages in thread
From: Tom Lane @ 2014-12-15 18:17 UTC (permalink / raw)
To: Kido Kouassi <jjkido@gmail.com>; +Cc: pgsql-admin
> On 12/15/2014 12:58 PM, Kido Kouassi wrote:
>> I used the following sequence to install
>>
>> 1- yum install postgresql93-server.x86_64 postgresql93-jdbc.x86_64 postgresql93.x86_64 postgresql93-contrib.x86_64 postgresql93-pltcl.x86_64 postgresql93-plpython.x86_64
>> postgresql93-odbc.x86_64 postgresql93-libs.x86_64
>>
>> 2- service postgresql-9.3 initdb
>>
>> 3-service postgresql-9.3 start
>>
>> at the first try database started with no issue,
>>
>> then I copied the Cert and keys files, to the data folder,
>>
>> modified the postgresql.conf with
>>
>> ssl = on
>> #ssl_ciphers = 'DEFAULT:!LOW:!EXP:!MD5:@STRENGTH'
>>
>> #ssl_renegotiation_limit = 512MB
>> ssl_cert_file = 'server.crt'
>> ssl_key_file = 'server.key'
>> ssl_ca_file = 'root.crt'
>> #ssl_crl_file = ''
>>
>> After this I change ownership of the whole data folder to postgres user and restarted the service.
>>
>>
>> 1- The service did not start
>>
>> 2- Nothing was logged in the log file.
I'd bet this has nothing to do with SSL and lots to do with the "change
ownership" step. You sure you did that right?
regards, tom lane
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Yum Install postgresql93 with SSL
2014-12-15 17:58 Yum Install postgresql93 with SSL Kido Kouassi <jjkido@gmail.com>
2014-12-15 18:10 ` Re: Yum Install postgresql93 with SSL John Scalia <jayknowsunix@gmail.com>
2014-12-15 18:17 ` Re: Yum Install postgresql93 with SSL Tom Lane <tgl@sss.pgh.pa.us>
@ 2014-12-15 18:30 ` Kido Kouassi <jjkido@gmail.com>
0 siblings, 0 replies; 5+ messages in thread
From: Kido Kouassi @ 2014-12-15 18:30 UTC (permalink / raw)
To: Tom Lane <tgl@sss.pgh.pa.us>; +Cc: pgsql-admin
hello Tom,
Thanks a bunch,
The ownership was right but I my permissions were wrong.
I had -rw-r--r-- on my cert files after I changed it to -rwx------
everything started working.
You guys are awesome,
Thanks again,
-- Kido
On Mon, Dec 15, 2014 at 1:17 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>
> > On 12/15/2014 12:58 PM, Kido Kouassi wrote:
> >> I used the following sequence to install
> >>
> >> 1- yum install postgresql93-server.x86_64 postgresql93-jdbc.x86_64
> postgresql93.x86_64 postgresql93-contrib.x86_64 postgresql93-pltcl.x86_64
> postgresql93-plpython.x86_64
> >> postgresql93-odbc.x86_64 postgresql93-libs.x86_64
> >>
> >> 2- service postgresql-9.3 initdb
> >>
> >> 3-service postgresql-9.3 start
> >>
> >> at the first try database started with no issue,
> >>
> >> then I copied the Cert and keys files, to the data folder,
> >>
> >> modified the postgresql.conf with
> >>
> >> ssl = on
> >> #ssl_ciphers = 'DEFAULT:!LOW:!EXP:!MD5:@STRENGTH'
> >>
> >> #ssl_renegotiation_limit = 512MB
> >> ssl_cert_file = 'server.crt'
> >> ssl_key_file = 'server.key'
> >> ssl_ca_file = 'root.crt'
> >> #ssl_crl_file = ''
> >>
> >> After this I change ownership of the whole data folder to postgres user
> and restarted the service.
> >>
> >>
> >> 1- The service did not start
> >>
> >> 2- Nothing was logged in the log file.
>
> I'd bet this has nothing to do with SSL and lots to do with the "change
> ownership" step. You sure you did that right?
>
> regards, tom lane
>
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Yum Install postgresql93 with SSL
2014-12-15 17:58 Yum Install postgresql93 with SSL Kido Kouassi <jjkido@gmail.com>
2014-12-15 18:10 ` Re: Yum Install postgresql93 with SSL John Scalia <jayknowsunix@gmail.com>
@ 2014-12-15 18:23 ` Kido Kouassi <jjkido@gmail.com>
1 sibling, 0 replies; 5+ messages in thread
From: Kido Kouassi @ 2014-12-15 18:23 UTC (permalink / raw)
To: John Scalia <jayknowsunix@gmail.com>; +Cc: pgsql-admin
Hello Jay,
I just just updated my postgresql.conf to use explicit paths for
server.key, server.crt and root.crt, still not working.
Thank you for trying though,
-- Kido K
On Mon, Dec 15, 2014 at 1:10 PM, John Scalia <jayknowsunix@gmail.com> wrote:
>
> Not absolutely certain, but you may need to use an explicit path to those
> SSL files. Something like "/var/lib/pgsql/9.3/data/server.crt", etc...
>
> --
> Jay
>
>
> On 12/15/2014 12:58 PM, Kido Kouassi wrote:
>
> Hello Admins,
>
> I am looking to Install PostgreSQL using the Yum Install on CentOS 6 With
> support for SSL but is is not working.
>
> My question is: am I doing it wrong or the only way to have SSL support
> is to build from source?
>
> Here is what I did:
>
> I used the following sequence to install
>
> 1- yum install postgresql93-server.x86_64 postgresql93-jdbc.x86_64
> postgresql93.x86_64 postgresql93-contrib.x86_64 postgresql93-pltcl.x86_64
> postgresql93-plpython.x86_64 postgresql93-odbc.x86_64
> postgresql93-libs.x86_64
>
> 2- service postgresql-9.3 initdb
>
> 3- service postgresql-9.3 start
>
> at the first try database started with no issue,
>
> then I copied the Cert and keys files, to the data folder,
>
> modified the postgresql.conf with
>
> ssl = on
> #ssl_ciphers = 'DEFAULT:!LOW:!EXP:!MD5:@STRENGTH'
>
> #ssl_renegotiation_limit = 512MB
> ssl_cert_file = 'server.crt'
> ssl_key_file = 'server.key'
> ssl_ca_file = 'root.crt'
> #ssl_crl_file = ''
>
> After this I change ownership of the whole data folder to postgres user
> and restarted the service.
>
>
> 1- The service did not start
>
> 2- Nothing was logged in the log file.
>
>
>
> Thank you in advance for your help,
>
>
> --Kido K
>
>
>
^ permalink raw reply [nested|flat] 5+ messages in thread
end of thread, other threads:[~2014-12-15 18:30 UTC | newest]
Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2014-12-15 17:58 Yum Install postgresql93 with SSL Kido Kouassi <jjkido@gmail.com>
2014-12-15 18:10 ` John Scalia <jayknowsunix@gmail.com>
2014-12-15 18:17 ` Tom Lane <tgl@sss.pgh.pa.us>
2014-12-15 18:30 ` Kido Kouassi <jjkido@gmail.com>
2014-12-15 18:23 ` Kido Kouassi <jjkido@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox