From: Gunnar \"Nick\" Bluth <gunnar.bluth.extern@elster.de>
To: pgsql-admin@postgresql.org
Subject: Re: pg_hba.conf and hostssl all all 999.999.999.0/24 cert and use of letsencrypt.org software
Date: Mon, 30 Jan 2017 09:20:29 +0100
Message-ID: <7e322d81-b7ad-b484-d84d-a1a9c01fa94d@elster.de> (raw)
In-Reply-To: <CAAOuvVrP+q20W1R4xm833O+Y87uohmo1Juu6rGO3DZi1hjBU2w@mail.gmail.com>
References: <CAAOuvVrP+q20W1R4xm833O+Y87uohmo1Juu6rGO3DZi1hjBU2w@mail.gmail.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Am 01/25/2017 um 02:45 PM schrieb Poul Kristensen:
>
> Hi!
Hi Poul,
> Does anyone know if letsencrypt can be used to authenticate host(client)
> to host (PostgreSQL)?
> The goal is to let the client authenticate againts the certificate
> registered
> in an openLDAP and use letsencrypt.org <http://letsencrypt.org; software.
> The PostgreSQL host is going to run the openLDAP too.
>
> Have anyone tried this?
I'm wondering if you really thought this through... why would you want
to rely on a (rather trustworthy, but alas!) CA to manage your
certificates when you can use your own (google "easyrsa") CA without any
significant hassle?
But maybe I'm missing something ;-)
Cheers,
--
Gunnar "Nick" Bluth
DBA ELSTER
Tel: +49 911/991-4665
Mobil: +49 172/8853339
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: gunnar.bluth.extern@elster.de
Subject: Re: pg_hba.conf and hostssl all all 999.999.999.0/24 cert and use of letsencrypt.org software
In-Reply-To: <7e322d81-b7ad-b484-d84d-a1a9c01fa94d@elster.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox