Received: from maia.hub.org (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id 6CC846332DA for ; Tue, 20 Apr 2010 13:22:50 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 96853-02-5 for ; Tue, 20 Apr 2010 16:22:40 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from rimantadine.ncsa.uiuc.edu (rimantadine.ncsa.uiuc.edu [141.142.2.77]) by mail.postgresql.org (Postfix) with ESMTP id E2E0A635C24 for ; Tue, 20 Apr 2010 12:40:03 -0300 (ADT) Received: from zimbra-1.ncsa.uiuc.edu (zimbra.ncsa.uiuc.edu [141.142.2.140]) by rimantadine.ncsa.uiuc.edu (8.14.4/8.14.4) with ESMTP id o3KFe1ch018545 for ; Tue, 20 Apr 2010 10:40:01 -0500 Date: Tue, 20 Apr 2010 10:40:01 -0500 (CDT) From: Jeffrey Gaynor To: pgsql-admin@postgresql.org Message-ID: <1425839617.2702.1271778001437.JavaMail.root@zimbra-1.ncsa.uiuc.edu> In-Reply-To: <74745749.2535.1271178283785.JavaMail.root@zimbra-1.ncsa.uiuc.edu> Subject: Re: SSL question MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [141.142.52.208] X-Mailer: Zimbra 6.0.5_GA_2213.RHEL5_64 (ZimbraWebClient - FF3.0 (Linux)/6.0.5_GA_2213.RHEL5_64) X-Null-Tag: 265c6dd54a39a91ce25a568d6a3943a3 X-NCSA-MailScanner-Information: Please contact help@ncsa.uiuc.edu for more information, rimantadine.ncsa.uiuc.edu X-NCSA-MailScanner-ID: o3KFe1ch018545 X-NCSA-MailScanner: Found to be clean X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.91 tagged_above=-10 required=5 tests=BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201004/317 X-Sequence-Number: 34411 Never mind. I had misnamed the cert to root rather than server. Problem fixed. Oh and delaying posts a week sure is a great way to get people to expand their horizons. :o) ----- Original Message ----- From: "Jeffrey Gaynor" To: pgsql-admin@postgresql.org Sent: Tuesday, April 13, 2010 12:04:43 PM Subject: [ADMIN] SSL question I am trying to get SSL to to work with Postgres 8.1 under CentOS 5. The situation is that I have a key and cert I must use (so no self-signing) and attempting to access the database yields the message that no client cert was found in the ~/.postgresql directory. It is my understanding that I do not need a client cert, correct? I tried to fix this by setting the option "clientcert=0" in my pg_hda.conf file. Q: How to I make it so that no client cert is required? I'm a bit of a newbie with Postgres, so any and all information is happily received. Thanks! -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin