pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed

From: Ray Stell <stellr@cns.vt.edu>
To: Carol Walter <walterc@indiana.edu>
Cc: pgsql-admin@postgresql.org
Subject: Re: ssl database connection problems...
Date: Wed, 31 Dec 2008 10:09:20 -0500
Message-ID: <20081231150920.GB10149@cns.vt.edu> (raw)
In-Reply-To: <7231B567-C7EE-4897-B209-1C1E17CEC83F@indiana.edu>
References: <752F2E74-9F28-4E3D-869C-93357751AFA0@indiana.edu>
	<20081230023630.GA19239@cns.vt.edu>
	<4D15E432-79CD-4D0E-ACDD-BC1ABCC5BAFD@indiana.edu>
	<20081231014235.GA10365@cns.vt.edu>
	<7231B567-C7EE-4897-B209-1C1E17CEC83F@indiana.edu>

On Wed, Dec 31, 2008 at 09:19:12AM -0500, Carol Walter wrote:
> Here's the output from s_client & s_server commands...
>
> # openssl s_client
> connect: Connection refused
> connect:errno=146

oh, I think you need to use some more flags.  Take a look at
this howto:  http://www.madboa.com/geek/openssl/


> I don't have a root.crt file. 
>
> # openssl  verify -CAfile ./root.crt testcert.pem

right, my file root.ca was self generated using openssl (I'm the CA).  It is
analogous to the CA chain you might buy from Thawte or some other trusted
authority.  It is the file that I used to sign my server crt file, testcrt.pem.
`
Yeah, you don't need it unless you want to auth a login with pg, but we
are not there yet.  You need to verify that openssl is not fubar first, right?


Best in 2009, everyone:  Carbon-free city under construction,   cool!

  http://cosmos.bcst.yahoo.com/up/ynews;_ylt=AgPr9FSysEdu1cF5ydA9CPr737YB?ch=4226722&cl=11310260&a...

view thread (22+ messages)  latest in thread

Message-ID: <20081231150920.GB10149@cns.vt.edu>
Permalink:  ../20081231150920.GB10149@cns.vt.edu/
Also on:    postgresql.org/message-id/20081231150920.GB10149@cns.vt.edu

copy link · copy postgr.es

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: stellr@cns.vt.edu, walterc@indiana.edu
  Subject: Re: ssl database connection problems...
  In-Reply-To: <20081231150920.GB10149@cns.vt.edu>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox