From: Ray Stell <stellr@cns.vt.edu>
To: Carol Walter <walterc@indiana.edu>
Cc: pgsql-admin@postgresql.org
Subject: Re: ssl database connection problems...
Date: Mon, 29 Dec 2008 21:36:30 -0500
Message-ID: <20081230023630.GA19239@cns.vt.edu> (raw)
In-Reply-To: <752F2E74-9F28-4E3D-869C-93357751AFA0@indiana.edu>
References: <752F2E74-9F28-4E3D-869C-93357751AFA0@indiana.edu>
On Mon, Dec 29, 2008 at 04:23:30PM -0500, Carol Walter wrote:
> "with openssl" when I initially configured the server. Are there other
> things that need to be done to get openssl started on the database server?
> How can I diagnose this problem?
>
The files server.key, server.crt, root.crt, and root.crl are only examined
during server start; so you must restart the server for changes in them
to take effect.
http://www.postgresql.org/docs/8.3/interactive/ssl-tcp.html
It's been awhile since I played with this, but there's something about an
environment var, PGSSLMODE.
You can use openssl to verify the server/root ca correctness like
this:
openssl verify -CAfile ./root.crt testcert.pem
assuming openssl in the mix.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: stellr@cns.vt.edu, walterc@indiana.edu
Subject: Re: ssl database connection problems...
In-Reply-To: <20081230023630.GA19239@cns.vt.edu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox