pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Wim Bertels <wim.bertels@ucll.be>
To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
To: s.dunand@sirap.fr <s.dunand@sirap.fr>
Subject: Re: Setting up SSL for postgre
Date: Mon, 20 Aug 2018 13:29:35 +0000
Message-ID: <1534771775784.73685@ucll.be> (raw)
In-Reply-To: <4ea1e251-0aa2-be17-4405-d1ccec951ecc@sirap.fr>
References: <032401d43326$6c275d80$44761880$@gmail.com>
	<CALBNtw6-BnnA9AGpaTfSecSnjppLApaKTsYJ664HtfzBt14nRg@mail.gmail.com>
	<034901d4333f$d2aa7650$77ff62f0$@gmail.com>
	<CALBNtw7+xDCocj6M-K6mna4Ujresami2YfvdfVS0Q-q-B5PFTg@mail.gmail.com>
	<076401d43883$89ec6830$9dc53890$@gmail.com>
	<4ea1e251-0aa2-be17-4405-d1ccec951ecc@sirap.fr>



pg_hba.conf
# TYPE  DATABASE        USER            CIDR-ADDRESS            METHOD

# IPv4 local & remote connections:
host    all             all             127.0.0.1/32            trust
hostssl all         postgres    0.0.0.0/0             cert

cert method for auth, hence this behaviour (client cert..)

extra tip:
https://duckduckgo.com/?q=letsencrypt+postgresql
for official server side certificates

mvg,
 Bertels Wim

Mark
__


This page helped me :
https://www.depesz.com/2015/05/11/how-to-setup-ssl-connections-and-authentication/

Best regards,
Stéphane

view thread (22+ messages)  latest in thread

Message-ID: <1534771775784.73685@ucll.be>
Permalink:  ../1534771775784.73685@ucll.be/
Also on:    postgresql.org/message-id/1534771775784.73685@ucll.be

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: wim.bertels@ucll.be, pgsql-admin@lists.postgresql.org, s.dunand@sirap.fr
  Subject: Re: Setting up SSL for postgre
  In-Reply-To: <1534771775784.73685@ucll.be>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox