From: Ray Stell <stellr@cns.vt.edu>
To: Carol Walter <walterc@indiana.edu>
Cc: pgsql-admin@postgresql.org
Subject: Re: ssl database connection problems...
Date: Thu, 22 Jan 2009 13:27:47 -0500
Message-ID: <20090122182747.GA22330@cns.vt.edu> (raw)
In-Reply-To: <F55F82FF-D064-42FE-99DC-80A447B4BE56@indiana.edu>
References: <F55F82FF-D064-42FE-99DC-80A447B4BE56@indiana.edu>
On Thu, Jan 22, 2009 at 10:35:22AM -0500, Carol Walter wrote:
> I'm still having problems with ssl. My ssl_ciphers line in postgresql.conf
> looks as the following:
>
> ssl_ciphers 'ALL:!ADH:!LOW:@STRENGTH'
this parameter was not available in 8.2.x when I tested so what
I say here has little basis.
1. no equal sign?
2. isn't this a list of values to choose from so should it be:
ssl_ciphers='ALL' ???
3. the doc does not say what happens if the the guy is commented
out: http://www.postgresql.org/docs/8.3/interactive/runtime-config-connection.html#GUC-SSL-CIPHERS
I wonder what the default is?
4. the doc: http://www.postgresql.org/docs/8.3/interactive/ssl-tcp.html
says: "a list of ciphers can be specified" which makes it sound
optional, but again, I'm without clue.
> Do you have any ideas for me to try to solve this problem?
Well, I think when I did it with 8.2 it was by trial and error in
a test environment. I just kept changing stuff and kept a
matrix of where I had been. There is a finite number of things
to change. It might be good to make a list of possible
variable/values. I've not done that, but it might be good
for us to try to construct a howto.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: stellr@cns.vt.edu, walterc@indiana.edu
Subject: Re: ssl database connection problems...
In-Reply-To: <20090122182747.GA22330@cns.vt.edu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox