MIME-Version: 1.0
From: AjithKumar Kannan <ajithz2307@gmail.com>
Date: Wed, 18 Sep 2024 20:43:24 +0530
Message-ID: 
 <CAK3_n79UmR3xETB9od9Rhpt2cd4e=1tmp9rwooTaVNO5Aw4SHg@mail.gmail.com>
Subject: Postgres - SSL connection using only root CA
To: pgsql-admin@lists.postgresql.org
Content-Type: multipart/alternative; boundary="000000000000f83fe20622663f96"
Archived-At: 
 <https://www.postgresql.org/message-id/CAK3_n79UmR3xETB9od9Rhpt2cd4e%3D1tmp9rwooTaVNO5Aw4SHg%40mail.gmail.com>
Precedence: bulk

--000000000000f83fe20622663f96
Content-Type: text/plain; charset="UTF-8"

Hi Team,

Im looking for an option to connect the Postgres DB with only the root CA
file instead of all three cert files (rootca, server, and key).

I have tried the SSL mode as verify-ca in hba config and was trying to
connect the DB using only ca, but that did not succeed. In Postgres, do we
have any option to use only rootca for SSL connections?

Regards,
Ajith

--000000000000f83fe20622663f96
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Hi Team,<div dir=3D"auto"><br></div><div dir=3D"auto"><di=
v dir=3D"auto">Im looking for an option to connect the Postgres DB with onl=
y the root CA file instead of all three cert files (rootca, server, and key=
).</div><div dir=3D"auto"><br></div><div dir=3D"auto">I have tried the SSL =
mode as verify-ca in hba config and was trying to connect the DB using only=
 ca, but that did not succeed. In Postgres, do we have any option to use on=
ly rootca for SSL connections?=C2=A0</div></div><div dir=3D"auto"></div><di=
v dir=3D"auto"><br></div><div dir=3D"auto">Regards,</div><div dir=3D"auto">=
Ajith</div><div dir=3D"auto"><br></div><div dir=3D"auto"><br></div><div dir=
=3D"auto"><br></div><div dir=3D"auto"><br></div></div>

--000000000000f83fe20622663f96--