Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fuPda-0001ev-AG for pgsql-admin@arkaria.postgresql.org; Mon, 27 Aug 2018 22:05:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fuPdY-0007OA-AM for pgsql-admin@arkaria.postgresql.org; Mon, 27 Aug 2018 22:05:28 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fuPdY-0007Nj-0k for pgsql-admin@lists.postgresql.org; Mon, 27 Aug 2018 22:05:28 +0000 Received: from mail-pl1-x641.google.com ([2607:f8b0:4864:20::641]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1fuPdU-0007Lt-CN for pgsql-admin@lists.postgresql.org; Mon, 27 Aug 2018 22:05:26 +0000 Received: by mail-pl1-x641.google.com with SMTP id j8-v6so188408pll.12 for ; Mon, 27 Aug 2018 15:05:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=references:user-agent:from:to:cc:subject:in-reply-to:date :message-id:mime-version; bh=Yw0td+eCVrUEAw94g3kp4acPva4z3KYu7OSgKps3ah4=; b=XfxmiTxVkg4yC9il9c7fmzNzwnEmWd6wipOWgXurUJoPRHm5xQbJnOwFIObAJ6CDeT sAMdL3vfjqUeDxu4BtcfCqlkEEqAiVFIpkY50aS0EdCmFaZf/tAJBVAB1g/dxCEG1zo8 R7SMaNnJ2ASY2K5PFECqFj9xP8yDdriVWba8b8R13/n5i/JCo8ke1EU97rApo5GPbk4F TI3Sowsc4RebeT797b3SducyABuXaTd04kUKygEnb9sXqlSYbdowZu12aFPvlmIMLz+V T/WZ7tJ4ED3hdIUTw2+XYSx+d/3vtyCIH7P9fkFzrUcGU+nOz4dCfhMMts7eMlCGASZn M4Yw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:references:user-agent:from:to:cc:subject :in-reply-to:date:message-id:mime-version; bh=Yw0td+eCVrUEAw94g3kp4acPva4z3KYu7OSgKps3ah4=; b=Apx0b2OYyPBTTKBR6vamnGrXQhus50f6P1vqEJ6tq5+PkrIxdqSQ3KnWwN3G6vsyKj KBmBwj3X5Fclax3ZG+pdlBK2elVC6Apd6uygAmsB7nVNsKdRMpUluNFjSiLa2/pUMXkI yeTC+t896GXt9f1NKwd5XXOqLP/zusqqOEL6Q5UJ1pd8tAXGEZlxS7LIwzbq0sbTSp1c dIgMk+PYBnUM/K9jgvWOhS3/qb/+gRWROtBeU+zOu9gti+7SgAorOL5NIYdVNRCn3DRK VuePugrCAe4wSXjzho3v/pXH/MUUjMsUcTo7+bfFKzperoCkrth2PxEISkHE6lVGYosy k0dg== X-Gm-Message-State: APzg51DJ/RooxhpNZgMSUGKAOoQFJEdAeVZTk7n6TT2E7Qr3ZG3w/xAO iypnBIQjF6SG0ffShRBtM5I= X-Google-Smtp-Source: ANB0VdZmInz8EcDUtg+kGgm3io+h620nLAh7W2HVcfHLXEy3gXK5WUyLjQY3aBghDsk10hRc+tp7DA== X-Received: by 2002:a17:902:6f10:: with SMTP id w16-v6mr14519087plk.216.1535407522491; Mon, 27 Aug 2018 15:05:22 -0700 (PDT) Received: from tim-desktop (2001-44b8-31f2-bb00-1d5a-32a9-7309-2bcb.static.ipv6.internode.on.net. [2001:44b8:31f2:bb00:1d5a:32a9:7309:2bcb]) by smtp.gmail.com with ESMTPSA id v20-v6sm500794pfk.12.2018.08.27.15.05.20 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Mon, 27 Aug 2018 15:05:21 -0700 (PDT) References: <032401d43326$6c275d80$44761880$@gmail.com> <034901d4333f$d2aa7650$77ff62f0$@gmail.com> <076401d43883$89ec6830$9dc53890$@gmail.com> <000e01d43e32$f35aad40$da1007c0$@gmail.com> User-agent: mu4e 0.9.18; emacs 26.1 From: Tim Cross To: Mark Williams Cc: pgsql-admin@lists.postgresql.org, s.dunand@sirap.fr Subject: Re: FW: Setting up SSL for postgre In-reply-to: <000e01d43e32$f35aad40$da1007c0$@gmail.com> Date: Tue, 28 Aug 2018 08:05:18 +1000 Message-ID: <87efejihy9.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Mark Williams writes: > > > > > __ > > > > From: Mark Williams > Sent: 25 August 2018 18:14 > To: 'Wim Bertels' > Subject: RE: Setting up SSL for postgre > > > > Hi Wim, > > > > I don't understand. If I don't include the password option, the connection > will be refused because I have not included it. > > > > I am connecting via PGAdmin with the same user ie postgres. > I suspect Wim was referring to private certificate authentication rather than connections over SSL - use the same basic technologies, but for different goals. While it may or may not be useful, I believe that recent versions of Debian actually come with SSL connections enabled by default (using self signed cert). Might provide the example you need? Tim -- Tim Cross