Subject: Re: pg_hba.conf and hostssl all all 999.999.999.0/24 cert and
 use of letsencrypt.org software
To: pgsql-admin@postgresql.org
References: 
 <CAAOuvVrP+q20W1R4xm833O+Y87uohmo1Juu6rGO3DZi1hjBU2w@mail.gmail.com>
From: "Gunnar \"Nick\" Bluth" <gunnar.bluth.extern@elster.de>
Message-ID: <7e322d81-b7ad-b484-d84d-a1a9c01fa94d@elster.de>
Date: Mon, 30 Jan 2017 09:20:29 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.5.1
MIME-Version: 1.0
In-Reply-To: 
 <CAAOuvVrP+q20W1R4xm833O+Y87uohmo1Juu6rGO3DZi1hjBU2w@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Precedence: bulk
Sender: pgsql-admin-owner@postgresql.org

Am 01/25/2017 um 02:45 PM schrieb Poul Kristensen:
> 
> Hi!

Hi Poul,


> Does anyone know if letsencrypt can be used to authenticate host(client)
> to host (PostgreSQL)? 
> The goal is to let the client authenticate againts the certificate
> registered
> in an openLDAP and use letsencrypt.org <http://letsencrypt.org> software. 
> The PostgreSQL host is going to run the openLDAP too.
> 
> Have anyone tried this?

I'm wondering if you really thought this through... why would you want
to rely on a (rather trustworthy, but alas!) CA to manage your
certificates when you can use your own (google "easyrsa") CA without any
significant hassle?

But maybe I'm missing something ;-)

Cheers,
-- 
Gunnar "Nick" Bluth
DBA ELSTER

Tel:   +49 911/991-4665
Mobil: +49 172/8853339


-- 
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin