Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1frkQY-0007qt-Cw for pgsql-admin@arkaria.postgresql.org; Mon, 20 Aug 2018 13:41:02 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1frkQW-0002XR-Er for pgsql-admin@arkaria.postgresql.org; Mon, 20 Aug 2018 13:41:00 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1frkFe-0006Wk-Ru for pgsql-admin@lists.postgresql.org; Mon, 20 Aug 2018 13:29:47 +0000 Received: from asp-level3-out1.belnet.be ([2001:6a8:3c80::154]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1frkFa-0001SK-4A for pgsql-admin@lists.postgresql.org; Mon, 20 Aug 2018 13:29:45 +0000 Received: from ANTLER.int.ucll.be (antler.ucll.be [193.190.138.14]) by asp-level3-out1.belnet.be (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id w7KDTaLd001666 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 20 Aug 2018 15:29:36 +0200 Received: from ROLLING.int.ucll.be (10.21.7.30) by webmail.ucll.be (193.190.138.14) with Microsoft SMTP Server (TLS) id 15.0.1293.2; Mon, 20 Aug 2018 15:29:34 +0200 Received: from ROLLING.int.ucll.be (10.21.7.30) by ROLLING.int.ucll.be (10.21.7.30) with Microsoft SMTP Server (TLS) id 15.0.1293.2; Mon, 20 Aug 2018 15:29:35 +0200 Received: from ROLLING.int.ucll.be ([fe80::f93b:729:9ace:3688]) by ROLLING.int.ucll.be ([fe80::f93b:729:9ace:3688%14]) with mapi id 15.00.1293.006; Mon, 20 Aug 2018 15:29:35 +0200 From: Wim Bertels To: "pgsql-admin@lists.postgresql.org" , "s.dunand@sirap.fr" Subject: Re: Setting up SSL for postgre Thread-Topic: Setting up SSL for postgre Thread-Index: AQJ64nPKQfAewiPZ9t7gQ7SiT+1fnwIMhi/1AcD6KUcCiXXq5aM+/62ggAmE0jD//+mFgIAAKFbm Date: Mon, 20 Aug 2018 13:29:35 +0000 Message-ID: <1534771775784.73685@ucll.be> References: <032401d43326$6c275d80$44761880$@gmail.com> <034901d4333f$d2aa7650$77ff62f0$@gmail.com> <076401d43883$89ec6830$9dc53890$@gmail.com>,<4ea1e251-0aa2-be17-4405-d1ccec951ecc@sirap.fr> In-Reply-To: <4ea1e251-0aa2-be17-4405-d1ccec951ecc@sirap.fr> Accept-Language: nl-BE, en-GB, en-US Content-Language: nl-BE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.16.6.35] Content-Type: multipart/alternative; boundary="_000_153477177578473685ucllbe_" MIME-Version: 1.0 X-Spam-Score: undef - relay 193.190.138.14 marked with skip_spam_scan X-CanIt-Geo: ip=193.190.138.14; country=BE; region=Flanders; city=Leuven; latitude=50.8833; longitude=4.7000; http://maps.google.com/maps?q=50.8833,4.7000&z=6 X-CanItPRO-Stream: ucll-out:out (inherits from ucll-out:default,ucll-in:default,advanced:default,base:default) X-Canit-Stats-ID: Bayes signature not available X-Scanned-By: CanIt (www . roaringpenguin . com) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --_000_153477177578473685ucllbe_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable pg_hba.conf # TYPE DATABASE USER CIDR-ADDRESS METHOD # IPv4 local & remote connections: host all all 127.0.0.1/32 trust hostssl all postgres 0.0.0.0/0 cert cert method for auth, hence this behaviour (client cert..) extra tip: https://duckduckgo.com/?q=3Dletsencrypt+postgresql for official server side certificates mvg, Bertels Wim Mark __ This page helped me : https://www.depesz.com/2015/05/11/how-to-setup-ssl-connections-and-authenti= cation/ Best regards, St=E9phane --_000_153477177578473685ucllbe_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable


 

pg_hba.conf

# TYPE  DATABASE  &n= bsp;     USER       =      CIDR-ADDRESS       &= nbsp;    METHOD

 

# IPv4 local & remote connectio= ns:

host    all &nb= sp;           all &n= bsp;           127.0.0.1/= 32            trust<= /span>

hostssl all    =      postgres    0.0.0.0/0  &n= bsp;          cert


cert method for auth, hence this behaviour (client c= ert..)


extra tip:

https://duckduckgo.com/?q=3Dletsencrypt+postgresql

for official server side certificates


mvg,

 Bertels Wim<= /span>

 

Mark

__



This page helped me :
https://www.depesz.com/= 2015/05/11/how-to-setup-ssl-connections-and-authentication/

Best regards,
St=E9phane
--_000_153477177578473685ucllbe_--