Date: Fri, 9 Jan 2009 16:08:00 -0500
From: Ray Stell <stellr@cns.vt.edu>
To: Carol Walter <walterc@indiana.edu>
Cc: pgsql-admin@postgresql.org
Subject: Re: ssl database connection problems...
Message-ID: <20090109210800.GA31938@cns.vt.edu>
References: <73FCD508-7A12-44C1-A158-B3D8DF765240@indiana.edu>
	<7F8630E3-7545-4F26-B477-25B48CBCD634@indiana.edu>
	<20081231210841.GD25663@cns.vt.edu>
	<9DFACBC7-9732-4B59-8F4A-2A371B11445C@indiana.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <9DFACBC7-9732-4B59-8F4A-2A371B11445C@indiana.edu>
User-Agent: Mutt/1.5.17 (2007-11-01)

./configure --prefix=/usr/local/pgsql826 --with-libraries=/usr/local/openssl/lib --with-includes=/usr/local/openssl/include/  --with-openssl 


On Fri, Jan 09, 2009 at 03:47:54PM -0500, Carol Walter wrote:
> Well, back from the flu.  =P
>
> How do I tell postgres where to look for ssl.  I've got both the new and 
> the original versions of openssl.  I don't want to remove the original one 
> because it's loaded on the global zone and I don't know what other 
> dependencies it might have.  Do I have to back everything out and run 
> ./configure again?  I don't see a parm in postgresql.conf.
>
> Thanks,
> Carol
>
> On Dec 31, 2008, at 4:08 PM, Ray Stell wrote:
>
>> On Wed, Dec 31, 2008 at 11:16:42AM -0500, Carol Walter wrote:
>>>> On the web site you directed me to, the s_server command uses a file
>>>> called 'mycert.pem'.  Do you know what the system expecting for this 
>>>> file?
>>
>> It's just a file and you tell openssl where it is, where you put it
>> once it is created.  You request this file from your CA (certificate
>> authority) who will provide you with the root.crt, the public side of
>> the chain.  You can generate your own with openssl.   Here's a great
>> demo: http://www.madboa.com/geek/openssl/#cert
>>
>
>
> -- 
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin