Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oyTOK-0004Ba-Td for pgsql-admin@arkaria.postgresql.org; Fri, 25 Nov 2022 07:44:56 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1oyTOJ-0002oO-OS for pgsql-admin@arkaria.postgresql.org; Fri, 25 Nov 2022 07:44:55 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1oyTOJ-0002oE-Dk for pgsql-admin@lists.postgresql.org; Fri, 25 Nov 2022 07:44:55 +0000 Received: from mail-wr1-x42c.google.com ([2a00:1450:4864:20::42c]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1oyTOH-00066Q-UA for pgsql-admin@lists.postgresql.org; Fri, 25 Nov 2022 07:44:55 +0000 Received: by mail-wr1-x42c.google.com with SMTP id z4so5526714wrr.3 for ; Thu, 24 Nov 2022 23:44:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cybertec-at.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:user-agent:references :in-reply-to:date:cc:to:from:subject:message-id:from:to:cc:subject :date:message-id:reply-to; bh=DQfMp2FCfghBMP8JTNru4XbYJm09ef22ePUUVAlZWNY=; b=hLl8fVY18aS5RhpEEiOKi8WJ2EFZsV3lXySdJq3DiuOuR8cCw56bl3IuTpFQarRH03 vuaD9+H6Ua40KHXODlWhVzO7VJIUNifyUSXCEBmL/C6m1rDxxpJaLG9os+u3jn42leWq lv+XlfuFCmaay6QeQV5fFw0fGpc83eyqPR8dVHXjIBm6Z8DIGesiW6mRZwhkbdqaWic7 7VF0c9MiijYlZdxDxmLQ7GV8hY+H9RIdwE33cZ/DshOcBIalfCVHpAJIgDLwugv/PQMj tVilelRdT/BcFHTtIZsFua69wQ0r0lQo0U/BGTgGA14Ay9FDwKEt8QRr0OeF9lUdtvF1 Yagw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:user-agent:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=DQfMp2FCfghBMP8JTNru4XbYJm09ef22ePUUVAlZWNY=; b=NIdaf/iT5BRrORSvSSvjVvUCLGxoTG0GU93lkHfKXq6Q+JhZt/Kwja63K8AShB6QTn ZJ91vF8MuvDR79EMMra2tv1+CKRTt3/6bNuzC6oby+yog2FXY1Iae9Ds5CBgx+2XisVF l2zvRIAN0V3uY9siGLAcuYLD16bUZ+lXnMvF/nT2/+l+NgZkhAdqJ92WCJx3FCpT/7b7 OFNKppQHAt/kF8T/wr8LjAC6nXNXlgmJIXU0+Qkgq5Z+0uq6jHoJV8MEOHXHNk/vxGun bzQ471cA1FlAqCY58M4nfvs31gldvI6x56mTnNYaz3B7MVzaL/jLWhxRXpuzbFGD/B3S 20dg== X-Gm-Message-State: ANoB5plBFkX8f5xWqIYCPGAQezphOKI8iYeOWTEQ7DLQ0Z14HfrJMpP5 xoVAm/wGMrtZrMHX1GDm8xICphue8dCeKA== X-Google-Smtp-Source: AA0mqf6JOHU38PAuRjB3jKQbDlMLD4edzOWT/PrkAG1V0bbA/VOowYqaT9fXuPPKtj6Crf0Kf5cgrw== X-Received: by 2002:adf:fbc2:0:b0:241:eca8:4746 with SMTP id d2-20020adffbc2000000b00241eca84746mr6972468wrs.256.1669362292911; Thu, 24 Nov 2022 23:44:52 -0800 (PST) Received: from localhost.localdomain (mobiledyn-62-240-134-189.mrsn.at. [62.240.134.189]) by smtp.gmail.com with ESMTPSA id z12-20020a05600c220c00b003cf7055c014sm4200471wml.1.2022.11.24.23.44.52 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 24 Nov 2022 23:44:52 -0800 (PST) Message-ID: <5abfcab077173acd048432352bc1c6fa91b61332.camel@cybertec.at> Subject: Re: Difference between host, hostssl and hostnossl connection type From: Laurenz Albe To: Dhirendra Singh Cc: pgsql-admin@lists.postgresql.org Date: Fri, 25 Nov 2022 08:44:51 +0100 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.42.4 (3.42.4-2.fc35) MIME-Version: 1.0 Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, 2022-11-25 at 12:57 +0530, Dhirendra Singh wrote: > But if i provide cert authentication in host type and provide certificates then it should work.no ? > Otherwise the documentation is not clear about this limitation. I think that the documentation (https://www.postgresql.org/docs/current/auth-cert.html) is quite clear: > This authentication method uses SSL client certificates to perform authentication. > It is therefore only available for SSL connections. True, it doesn't spell out that you will get an error if you use it with "host", but the error message was clear enough, wasn't it? Yours, Laurenz Albe