Subject: Re: Replication & TLS encryption - how?
Cc: pgsql-admin@postgresql.org
References: <54a5bf2b-0504-02c0-e5a2-ab24173abcdb.ref@yahoo.co.uk>
 <54a5bf2b-0504-02c0-e5a2-ab24173abcdb@yahoo.co.uk>
 <1596782.1617813374@sss.pgh.pa.us>
From: lejeczek <peljasz@yahoo.co.uk>
Message-ID: <7e89a9be-e788-23fc-6b1b-2ee67586d452@yahoo.co.uk>
Date: Wed, 7 Apr 2021 21:12:15 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.8.1
MIME-Version: 1.0
In-Reply-To: <1596782.1617813374@sss.pgh.pa.us>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Content-Length: 742
Archived-At: 
 <https://www.postgresql.org/message-id/7e89a9be-e788-23fc-6b1b-2ee67586d452%40yahoo.co.uk>
Precedence: bulk


On 07/04/2021 17:36, Tom Lane wrote:
> lejeczek <peljasz@yahoo.co.uk> writes:
>> A novice here thus please go easy on me as I ask this - I
>> see docs/howtos all over the place be those either talk of
>> encryption or replication. I failed to find one which blend
>> these two concepts together - sure it's possible to pgSQL
>> replication encrypted, right?
> Replication connections work exactly like normal sessions for
> this purpose.  Just make sure you set any required parameters
> in the standby's connection string.
>
> 			regards, tom lane
>
>
Thanks. Would you know how '|clientcert=1' fits into the 
equation?
With it present in pg_hba.conf pgSQL was not happy saying:

FATAL:  connection requires a valid client certificate.
|