Received: from maia.hub.org (unknown [200.46.204.183])
	by mail.postgresql.org (Postfix) with ESMTP id D6008634873
	for <pgsql-admin-postgresql.org@mail.postgresql.org>;
	Thu, 15 Apr 2010 04:45:57 -0300 (ADT)
Received: from mail.postgresql.org ([200.46.204.86])
	by maia.hub.org (mx1.hub.org [200.46.204.183]) (amavisd-maia,
	port 10024) with ESMTP id 99274-04 for
	<pgsql-admin-postgresql.org@mail.postgresql.org>;
	Thu, 15 Apr 2010 07:45:47 +0000 (UTC)
X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20])
	by mail.postgresql.org (Postfix) with SMTP id E4978632971
	for <pgsql-admin@postgresql.org>; Thu, 15 Apr 2010 04:45:46 -0300 (ADT)
Received: (qmail 4826 invoked by uid 0); 15 Apr 2010 07:45:44 -0000
Received: from 193.194.157.126 by www084.gmx.net with HTTP;
	Thu, 15 Apr 2010 09:45:42 +0200 (CEST)
Cc: pgsql-admin@postgresql.org
Content-Type: text/plain; charset="iso-8859-1"
Date: Thu, 15 Apr 2010 09:45:42 +0200
From: =?iso-8859-1?Q?=22Martin_M=FCnstermann=22?= <mmuenst@gmx.de>
In-Reply-To: <201004150206.o3F26U427784@momjian.us>
Message-ID: <20100415074542.137300@gmx.net>
MIME-Version: 1.0
References: <201004150206.o3F26U427784@momjian.us>
Subject: Re: PostgreSQL with SSL
To: Bruce Momjian <bruce@momjian.us>, joseberardo@gmail.com
X-Authenticated: #740997
X-Flags: 0001
X-Mailer: WWW-Mail 6100 (Global Message Exchange)
X-Priority: 3
X-Provags-ID: V01U2FsdGVkX18mtZlsvb4m+efFVFSMYJCJpTUw/Ijct1HdT4H1jS
	T41l00e6IXlEVgnoBZA4BxE8undKu7+sHaAw==
Content-Transfer-Encoding: 8bit
X-GMX-UID: EPH0c5UGPjl+K7B6PTU2Bu07MTE2Ncm/
X-FuHaFi: 0.56999999999999995
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=0.801 tagged_above=-10 required=5 tests=BAYES_50=0.8,
	FREEMAIL_FROM=0.001
X-Spam-Level: 
X-Archive-Number: 201004/186
X-Sequence-Number: 34280

Hello.

> > don't know how to export the private key and when I use the keytool
> > certificate, the server crashes with this message:
> > 
> >  FATAL:  could not load server certificate file "server.crt": no start
> line
> > 
> > Sorry about too many questions, but anyone can help me to understand
> more
> > about ssl in PostgreSQL?
> 
> Have you read the documentation about creating a server key?
> 
> 	http://www.postgresql.org/docs/8.4/static/ssl-tcp.html

It is important that the server.crt and server.key files are in so-called PEM format. 
So they have to be text files and look like:

-----BEGIN CERTIFICATE-----
<some base64 encoded data>
-----END CERTIFICATE-----

and 

-----BEGIN RSA PRIVATE KEY-----
<some base64 encoded data>
-----END RSA PRIVATE KEY-----

This is the default format produced by openssl. 
The private key format is also openssl-specific, so probably you are out of luck with keytool.

Regards,
 Martin

-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01