Message-ID: <1511187176.2615.22.camel@cybertec.at>
Subject: Re: Restart PostgreSQL service with SSL and private key
 pass phrase
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: sri bhav <sri_bhav@hotmail.com>, "pgsql-admin@postgresql.org"
	 <pgsql-admin@postgresql.org>
Date: Mon, 20 Nov 2017 15:12:56 +0100
In-Reply-To: 
 <CY4PR11MB1304B99F42197A0A241A52B9E52F0@CY4PR11MB1304.namprd11.prod.outlook.com>
References: 
	<CY4PR11MB1304B99F42197A0A241A52B9E52F0@CY4PR11MB1304.namprd11.prod.outlook.com>
Organization: Cybertec
Content-Type: text/plain; charset="UTF-8"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

sri bhav wrote:
> I currently have PostgreSQL 9.5 installed on a Windows 10 machine. I have enabled SSL and configured key & crt files with pass phrase.
> I know that I have to enter the PEM pass phrase everytime I try to restart.

> Since I installed Postgres as Windows service, running pg_ctl does not start my service.
> I see postgresql exe instances running in Task manager but my windows service never gets updated to Running.

> Per our security requirements, we cannot remove the PEM pass phrase, so how do I control the PostgreSQL
> service – start & restart with the pass phrase and without user interaction.

Change the security requirements.

What good is a password on a key if you have to store it on the machine
anyway to allow automatic start of the PostgreSQL server?

Yours,
Laurenz Albe


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin