Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fuk57-00025M-HV for pgsql-admin@arkaria.postgresql.org; Tue, 28 Aug 2018 19:55:17 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fuk55-0002xo-F1 for pgsql-admin@arkaria.postgresql.org; Tue, 28 Aug 2018 19:55:15 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fuk55-0002xf-7s for pgsql-admin@lists.postgresql.org; Tue, 28 Aug 2018 19:55:15 +0000 Received: from pps02b.loc.gov ([140.147.137.46]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fuk50-0003fa-I0 for pgsql-admin@lists.postgresql.org; Tue, 28 Aug 2018 19:55:14 +0000 Received: from pps.filterd (pps02b.loc.gov [127.0.0.1]) by pps02b.loc.gov (8.16.0.22/8.16.0.22) with SMTP id w7SJqOxW021282; Tue, 28 Aug 2018 15:55:08 -0400 Received: from mail2.loc.gov (acfxex01.loc.gov [140.147.237.145]) by pps02b.loc.gov with ESMTP id 2m31x176xq-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 28 Aug 2018 15:55:08 -0400 Received: from LCXEX04.LCDS.LOC.GOV (140.147.104.95) by ACFXEX01.LCDS.LOC.GOV (140.147.237.145) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 28 Aug 2018 15:55:06 -0400 Received: from LCXEX04.LCDS.LOC.GOV ([::1]) by LCXEX04.LCDS.LOC.GOV ([::1]) with mapi id 15.00.1395.000; Tue, 28 Aug 2018 15:55:06 -0400 From: "Dai, Tino" To: Mark Williams , 'Tim Cross' CC: "pgsql-admin@lists.postgresql.org" , "s.dunand@sirap.fr" , 'Wim Bertels' Subject: Re: FW: Setting up SSL for postgre Thread-Topic: FW: Setting up SSL for postgre Thread-Index: AdQzJUyyKwMbkNDLR/2p5vR/yPzc5wIMhi/1AcD6KUcCiXXq5QDWmBXZAZlEObIB3ICezALgGU7vAsAuaGQBRyWFQgGcI70louoxBqCAAzjJwNyP+5gAgAFcjwD//83E1Q== Date: Tue, 28 Aug 2018 19:55:05 +0000 Message-ID: <1535486102822.43883@loc.gov> References: <032401d43326$6c275d80$44761880$@gmail.com> <034901d4333f$d2aa7650$77ff62f0$@gmail.com> <076401d43883$89ec6830$9dc53890$@gmail.com> <000e01d43e32$f35aad40$da1007c0$@gmail.com> <87efejihy9.fsf@gmail.com>,<013b01d43f00$527caf80$f7760e80$@gmail.com> In-Reply-To: <013b01d43f00$527caf80$f7760e80$@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [140.147.15.5] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2018-08-28_08:,, signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=926 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1808280192 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Before you do give up on postgres, take a look at this. I'm not sure if you= have tried this:=0A= =0A= https://stackoverflow.com/questions/16496199/firedac-sql-server-connection-= untrusted-certificate=0A= =0A= -T=0A= ________________________________________=0A= From: Mark Williams =0A= Sent: Tuesday, August 28, 2018 2:52 PM=0A= To: 'Tim Cross'=0A= Cc: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr; 'Wim Bertels'=0A= Subject: RE: FW: Setting up SSL for postgre=0A= =0A= Hi Tim,=0A= =0A= Thanks for the reply.=0A= =0A= Unfortunately, I don't know what private certificate authorisation is. I=0A= assume this is different to SSL and is not the same as a self signed cert. = I=0A= have created my certificate with OpenSSL so I assume I am not in the arena= =0A= of private certificate authorisation.=0A= =0A= Thanks for the tip re Debian, but sadly client and server are all Windows= =0A= machines.=0A= =0A= I think I will put a plea out there to anyone who uses FireDAC and has=0A= managed to get SSL working with Postgre. Absent anything useful there, I=0A= will give up on Postgre.=0A= =0A= All the best.=0A= =0A= Mark=0A= =0A=