From: Wim Bertels <wim.bertels@ucll.be>
To: Mark Williams <markwillimas@gmail.com>,
        "'Tim Cross'"
	<theophilusx@gmail.com>
CC: "pgsql-admin@lists.postgresql.org" <pgsql-admin@lists.postgresql.org>,
        "s.dunand@sirap.fr" <s.dunand@sirap.fr>
Subject: Re: FW: Setting up SSL for postgre
Thread-Topic: FW: Setting up SSL for postgre
Thread-Index: 
 AQJ64nPKQfAewiPZ9t7gQ7SiT+1fnwIMhi/1AcD6KUcCiXXq5QDWmBXZAZlEObIB3ICezALgGU7vAsAuaGQBRyWFQgGcI70louoxBqCAAzjJwIAAHLUAgAFcjwCAAo3wkA==
Date: Thu, 30 Aug 2018 07:55:49 +0000
Message-ID: <1535615748971.37236@ucll.be>
References: <032401d43326$6c275d80$44761880$@gmail.com>
 <CALBNtw6-BnnA9AGpaTfSecSnjppLApaKTsYJ664HtfzBt14nRg@mail.gmail.com>
 <034901d4333f$d2aa7650$77ff62f0$@gmail.com>
 <CALBNtw7+xDCocj6M-K6mna4Ujresami2YfvdfVS0Q-q-B5PFTg@mail.gmail.com>
 <076401d43883$89ec6830$9dc53890$@gmail.com>
 <000e01d43e32$f35aad40$da1007c0$@gmail.com>
 <87efejihy9.fsf@gmail.com>,<013b01d43f00$527caf80$f7760e80$@gmail.com>
In-Reply-To: <013b01d43f00$527caf80$f7760e80$@gmail.com>
Accept-Language: nl-BE, en-GB, en-US
Content-Language: nl-BE
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Precedence: bulk

Hallo Mark,=0A=
=0A=
in your pg_hha.conf you have used=0A=
=0A=
      cert=0A=
=0A=
as authentication,=0A=
which is authorization using a certificate=0A=
(not a password)=0A=
(as mailed before with documentation links)=0A=
=0A=
did you test pgadmin and firedac from the same client machine?=0A=
=0A=
hth,=0A=
Wim        =0A=
________________________________________=0A=
Van: Mark Williams <markwillimas@gmail.com>=0A=
Verzonden: dinsdag 28 augustus 2018 20:52=0A=
Aan: 'Tim Cross'=0A=
CC: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr; Wim Bertels=0A=
Onderwerp: RE: FW: Setting up SSL for postgre=0A=
=0A=
Hi Tim,=0A=
=0A=
Thanks for the reply.=0A=
=0A=
Unfortunately, I don't know what private certificate authorisation is. I=0A=
assume this is different to SSL and is not the same as a self signed cert. =
I=0A=
have created my certificate with OpenSSL so I assume I am not in the arena=
=0A=
of private certificate authorisation.=0A=
=0A=
Thanks for the tip re Debian, but sadly client and server are all Windows=
=0A=
machines.=0A=
=0A=
I think I will put a plea out there to anyone who uses FireDAC and has=0A=
managed to get SSL working with Postgre. Absent anything useful there, I=0A=
will give up on Postgre.=0A=
=0A=
All the best.=0A=
=0A=
Mark=0A=
=0A=
__=0A=
=0A=
-----Original Message-----=0A=
From: Tim Cross <theophilusx@gmail.com>=0A=
Sent: 27 August 2018 23:05=0A=
To: Mark Williams <markwillimas@gmail.com>=0A=
Cc: pgsql-admin@lists.postgresql.org; s.dunand@sirap.fr=0A=
Subject: Re: FW: Setting up SSL for postgre=0A=
=0A=
=0A=
Mark Williams <markwillimas@gmail.com> writes:=0A=
=0A=
>=0A=
>=0A=
>=0A=
>=0A=
> __=0A=
>=0A=
>=0A=
>=0A=
> From: Mark Williams <markwillimas@gmail.com>=0A=
> Sent: 25 August 2018 18:14=0A=
> To: 'Wim Bertels' <wim.bertels@ucll.be>=0A=
> Subject: RE: Setting up SSL for postgre=0A=
>=0A=
>=0A=
>=0A=
> Hi Wim,=0A=
>=0A=
>=0A=
>=0A=
> I don't understand. If I don't include the password option, the=0A=
> connection will be refused because I have not included it.=0A=
>=0A=
>=0A=
>=0A=
> I am connecting via PGAdmin with the same user ie postgres.=0A=
>=0A=
=0A=
I suspect Wim was referring to private certificate authentication rather=0A=
than connections over SSL - use the same basic technologies, but for=0A=
different goals.=0A=
=0A=
While it may or may not be useful, I believe that recent versions of Debian=
=0A=
actually come with SSL connections enabled by default (using self signed=0A=
cert). Might provide the example you need?=0A=
=0A=
Tim=0A=
=0A=
--=0A=
Tim Cross=0A=
=0A=