Received: from malur.postgresql.org ([217.196.149.56])
 by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from
 <pgsql-admin-owner+M43146=pgsql+2Dadmin=arkaria.postgresql.org@postgresql.org>)
 id 1Y0a6k-0004Tz-Pd
 for pgsql-admin@arkaria.postgresql.org; Mon, 15 Dec 2014 18:10:58 +0000
Received: from localhost ([127.0.0.1] helo=postgresql.org)
 by malur.postgresql.org with smtp (Exim 4.80) (envelope-from
 <pgsql-admin-owner+M43146=pgsql+2Dadmin=arkaria.postgresql.org@postgresql.org>)
 id 1Y0a6k-0000zc-3a
 for pgsql-admin@arkaria.postgresql.org; Mon, 15 Dec 2014 18:10:58 +0000
Received: from makus.postgresql.org ([2001:4800:1501:1::229])
 by malur.postgresql.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256)
 (Exim 4.80) (envelope-from <jayknowsunix@gmail.com>)
 id 1Y0a6j-0000zV-4u
 for pgsql-admin@postgresql.org; Mon, 15 Dec 2014 18:10:57 +0000
Received: from mail-qg0-x230.google.com ([2607:f8b0:400d:c04::230])
 by makus.postgresql.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.80) (envelope-from <jayknowsunix@gmail.com>)
 id 1Y0a6f-00060Z-RR
 for pgsql-admin@postgresql.org; Mon, 15 Dec 2014 18:10:55 +0000
Received: by mail-qg0-f48.google.com with SMTP id f51so8768324qge.7
 for <pgsql-admin@postgresql.org>; Mon, 15 Dec 2014 10:10:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=message-id:date:from:user-agent:mime-version:to:subject:references
 :in-reply-to:content-type;
 bh=ZGVzGXhT0SzLCDBZTn2heKOTFQspe9N6W7J3affDHBo=;
 b=grrv5PnKDUJiNQIKeod4/0eGWykswv1TaIxDae/FyEiVnMDoa8LIGJwzioKLj5jlzx
 4WhB8k1SBQ4QX1vV3wyKG8+vcNb/pQa8C45brds/rDrTjx/sRhFABwBfD9jH4NPa+bHy
 uK/PeIWZInl5Fwi/fv7c2FFjqb778RoE2UUkJ1qhXFLIfFJRmGK1WYnEMfvvX3mB7p9k
 G18WQUpt7DN/Icf2NrkablrqBYoJo/yyK+RSKYpOhG5POkBLpCkx3Plb7wxgpvs8Ku2Z
 Xkif7PdTWlVGPtB0fSuzlAGZ+bimztstgWCLfAUkydUPlYfG8aTab5k6/XflVxq5lB1l
 eszA==
X-Received: by 10.140.101.204 with SMTP id u70mr43028637qge.0.1418667048606;
 Mon, 15 Dec 2014 10:10:48 -0800 (PST)
Received: from [192.168.254.2] (h77.89.102.166.static.ip.windstream.net.
 [166.102.89.77])
 by mx.google.com with ESMTPSA id m9sm7578658qaa.46.2014.12.15.10.10.47
 for <multiple recipients>
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Mon, 15 Dec 2014 10:10:47 -0800 (PST)
Message-ID: <548F2427.2060102@gmail.com>
Date: Mon, 15 Dec 2014 13:10:47 -0500
From: John Scalia <jayknowsunix@gmail.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: Kido Kouassi <jjkido@gmail.com>,
 "pgsql-admin@postgresql.org" <pgsql-admin@postgresql.org>
Subject: Re: Yum Install postgresql93 with SSL
References: 
 <CA+ebzumSN0UG+JhWvGjuqC2a8RDf84yew8z8cqg=P7GWLTFXvw@mail.gmail.com>
In-Reply-To: 
 <CA+ebzumSN0UG+JhWvGjuqC2a8RDf84yew8z8cqg=P7GWLTFXvw@mail.gmail.com>
Content-Type: multipart/alternative;
 boundary="------------040205040503020706020802"
X-Pg-Spam-Score: -2.7 (--)
List-Archive: <http://archives.postgresql.org/pgsql-admin>
List-Help: <mailto:majordomo@postgresql.org?body=help>
List-ID: <pgsql-admin.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@postgresql.org>
List-Post: <mailto:pgsql-admin@postgresql.org>
List-Subscribe: <mailto:majordomo@postgresql.org?body=sub%20pgsql-admin>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
X-Mailing-List: pgsql-admin
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

This is a multi-part message in MIME format.
--------------040205040503020706020802
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Not absolutely certain, but you may need to use an explicit path to those SSL files. Something like "/var/lib/pgsql/9.3/data/server.crt", etc...

--
Jay

On 12/15/2014 12:58 PM, Kido Kouassi wrote:
> Hello Admins,
>
> I am looking to Install PostgreSQL using the Yum Install on CentOS 6 With support for SSL but is is not working.
>
> My question is: am I doing it wrong or the only way to have SSL support is to build from source?
>
> Here is what I did:
>
> I used the following sequence to install
>
> 1- yum install postgresql93-server.x86_64 postgresql93-jdbc.x86_64 postgresql93.x86_64 postgresql93-contrib.x86_64 postgresql93-pltcl.x86_64 postgresql93-plpython.x86_64 
> postgresql93-odbc.x86_64 postgresql93-libs.x86_64
>
> 2- service postgresql-9.3 initdb
>
> 3-service postgresql-9.3 start
>
> at the first try database started with no issue,
>
> then I copied the Cert and keys files, to the data folder,
>
> modified the postgresql.conf with
>
> ssl = on
> #ssl_ciphers = 'DEFAULT:!LOW:!EXP:!MD5:@STRENGTH'
>
> #ssl_renegotiation_limit = 512MB
> ssl_cert_file = 'server.crt'
> ssl_key_file = 'server.key'
> ssl_ca_file = 'root.crt'
> #ssl_crl_file = ''
>
> After this I change ownership of the whole data folder to postgres user and restarted the service.
>
>
> 1- The service did not start
>
> 2- Nothing was logged in the log file.
>
>
>
> Thank you in advance for your help,
>
>
> --Kido K
>


--------------040205040503020706020802
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Not absolutely certain, but you may need to use an explicit path to
    those SSL files. Something like
    "/var/lib/pgsql/9.3/data/server.crt", etc...<br>
    <br>
    --<br>
    Jay<br>
    <br>
    <div class="moz-cite-prefix">On 12/15/2014 12:58 PM, Kido Kouassi
      wrote:<br>
    </div>
    <blockquote
cite="mid:CA+ebzumSN0UG+JhWvGjuqC2a8RDf84yew8z8cqg=P7GWLTFXvw@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>
          <div>Hello Admins,<br>
            <br>
          </div>
          I am looking to Install PostgreSQL using the Yum Install on
          CentOS 6 With support for SSL but is is not working.<br>
          <br>
        </div>
        <div>My question is: am I doing it wrong or the only way to have
          SSL support is to build from source?<br>
          <br>
        </div>
        <div>Here is what I did:<br>
          <br>
        </div>
        <div>I used the following sequence to install<br>
          <br>
          <font><span style="font-family:monospace">1- yum install
              postgresql93-server.x86_64 postgresql93-jdbc.x86_64
              postgresql93.x86_64 postgresql93-contrib.x86_64
              postgresql93-pltcl.x86_64 postgresql93-plpython.x86_64
              postgresql93-odbc.x86_64 postgresql93-libs.x86_64</span></font><br>
          <br>
          2- <span style="font-family:monospace">service postgresql-9.3
            initdb</span><br>
          <br>
          3-<span style="font-family:monospace"> service postgresql-9.3
            start<br>
          </span><br>
        </div>
        <div>at the first try database started with no issue, <br>
          <br>
          then I copied the Cert and keys files, to the data folder,<br>
          <br>
        </div>
        <div>modified the postgresql.conf with <br>
          <br>
          <span style="font-family:monospace">ssl = on       <br>
            #ssl_ciphers = 'DEFAULT:!LOW:!EXP:!MD5:@STRENGTH'       <br>
                                   <br>
            #ssl_renegotiation_limit = 512MB    <br>
            ssl_cert_file = 'server.crt'      <br>
            ssl_key_file = 'server.key'   <br>
            ssl_ca_file = 'root.crt'              <br>
            #ssl_crl_file = '' <br>
            <br>
          </span></div>
        <div><span style="font-family:monospace"><font
              face="arial,helvetica,sans-serif">After this I change
              ownership of the whole data folder to postgres user and
              restarted the service.<br>
              <br>
              <br>
            </font></span></div>
        <div><span style="font-family:monospace"><font
              face="arial,helvetica,sans-serif">1- The service did not
              start<br>
              <br>
            </font></span></div>
        <div><span style="font-family:monospace"><font
              face="arial,helvetica,sans-serif">2- Nothing was logged in
              the log file.<br>
              <br>
              <br>
              <br>
            </font></span></div>
        <div><span style="font-family:monospace"><font
              face="arial,helvetica,sans-serif">Thank you in advance for
              your help,<br>
              <br>
              <br>
            </font></span></div>
        <div><span style="font-family:monospace"><font
              face="arial,helvetica,sans-serif">--Kido K</font>  </span>              
          <br>
        </div>
        <div><br>
        </div>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------040205040503020706020802--