From: Wim Bertels <wim.bertels@ucll.be>
To: Mark Williams <markwillimas@gmail.com>
To: 'Tim Cross' <theophilusx@gmail.com>
Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Cc: s.dunand@sirap.fr <s.dunand@sirap.fr>
Subject: Re: FW: Setting up SSL for postgre
Date: Thu, 30 Aug 2018 07:55:49 +0000
Message-ID: <1535615748971.37236@ucll.be> (raw)
In-Reply-To: <013b01d43f00$527caf80$f7760e80$@gmail.com>
References: <032401d43326$6c275d80$44761880$@gmail.com>
<CALBNtw6-BnnA9AGpaTfSecSnjppLApaKTsYJ664HtfzBt14nRg@mail.gmail.com>
<034901d4333f$d2aa7650$77ff62f0$@gmail.com>
<CALBNtw7+xDCocj6M-K6mna4Ujresami2YfvdfVS0Q-q-B5PFTg@mail.gmail.com>
<076401d43883$89ec6830$9dc53890$@gmail.com>
<000e01d43e32$f35aad40$da1007c0$@gmail.com>
<87efejihy9.fsf@gmail.com>
<013b01d43f00$527caf80$f7760e80$@gmail.com>
Hallo Mark,
in your pg_hha.conf you have used
cert
as authentication,
which is authorization using a certificate
(not a password)
(as mailed before with documentation links)
did you test pgadmin and firedac from the same client machine?
hth,
Wim
________________________________________
Van: Mark Williams <markwillimas@gmail.com>
Verzonden: dinsdag 28 augustus 2018 20:52
Aan: 'Tim Cross'
CC: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr; Wim Bertels
Onderwerp: RE: FW: Setting up SSL for postgre
Hi Tim,
Thanks for the reply.
Unfortunately, I don't know what private certificate authorisation is. I
assume this is different to SSL and is not the same as a self signed cert. I
have created my certificate with OpenSSL so I assume I am not in the arena
of private certificate authorisation.
Thanks for the tip re Debian, but sadly client and server are all Windows
machines.
I think I will put a plea out there to anyone who uses FireDAC and has
managed to get SSL working with Postgre. Absent anything useful there, I
will give up on Postgre.
All the best.
Mark
__
-----Original Message-----
From: Tim Cross <theophilusx@gmail.com>
Sent: 27 August 2018 23:05
To: Mark Williams <markwillimas@gmail.com>
Cc: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr
Subject: Re: FW: Setting up SSL for postgre
Mark Williams <markwillimas@gmail.com> writes:
>
>
>
>
> __
>
>
>
> From: Mark Williams <markwillimas@gmail.com>
> Sent: 25 August 2018 18:14
> To: 'Wim Bertels' <wim.bertels@ucll.be>
> Subject: RE: Setting up SSL for postgre
>
>
>
> Hi Wim,
>
>
>
> I don't understand. If I don't include the password option, the
> connection will be refused because I have not included it.
>
>
>
> I am connecting via PGAdmin with the same user ie postgres.
>
I suspect Wim was referring to private certificate authentication rather
than connections over SSL - use the same basic technologies, but for
different goals.
While it may or may not be useful, I believe that recent versions of Debian
actually come with SSL connections enabled by default (using self signed
cert). Might provide the example you need?
Tim
--
Tim Cross
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: wim.bertels@ucll.be, markwillimas@gmail.com, theophilusx@gmail.com, pgsql-admin@lists.postgresql.org, s.dunand@sirap.fr
Subject: Re: FW: Setting up SSL for postgre
In-Reply-To: <1535615748971.37236@ucll.be>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox