pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: sri bhav <sri_bhav@hotmail.com>
To: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: Restart PostgreSQL service with SSL and private key pass phrase
Date: Mon, 20 Nov 2017 15:12:56 +0100
Message-ID: <1511187176.2615.22.camel@cybertec.at> (raw)
In-Reply-To: <CY4PR11MB1304B99F42197A0A241A52B9E52F0@CY4PR11MB1304.namprd11.prod.outlook.com>
References: <CY4PR11MB1304B99F42197A0A241A52B9E52F0@CY4PR11MB1304.namprd11.prod.outlook.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>

sri bhav wrote:
> I currently have PostgreSQL 9.5 installed on a Windows 10 machine. I have enabled SSL and configured key & crt files with pass phrase.
> I know that I have to enter the PEM pass phrase everytime I try to restart.

> Since I installed Postgres as Windows service, running pg_ctl does not start my service.
> I see postgresql exe instances running in Task manager but my windows service never gets updated to Running.

> Per our security requirements, we cannot remove the PEM pass phrase, so how do I control the PostgreSQL
> service – start & restart with the pass phrase and without user interaction.

Change the security requirements.

What good is a password on a key if you have to store it on the machine
anyway to allow automatic start of the PostgreSQL server?

Yours,
Laurenz Albe


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin



view thread (3+ messages)

Message-ID: <1511187176.2615.22.camel@cybertec.at>
Permalink:  ../1511187176.2615.22.camel@cybertec.at/
Also on:    postgresql.org/message-id/1511187176.2615.22.camel@cybertec.at

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: laurenz.albe@cybertec.at, sri_bhav@hotmail.com
  Subject: Re: Restart PostgreSQL service with SSL and private key pass phrase
  In-Reply-To: <1511187176.2615.22.camel@cybertec.at>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox