public inbox for [email protected]  

help / color / mirror / Atom feed

Postgres - SSL connection using only root CA
4+ messages / 3 participants
[nested] [flat]

* Postgres - SSL connection using only root CA
@ 2024-09-18 15:13 AjithKumar Kannan <[email protected]>
  2024-09-18 15:18 ` Re: Postgres - SSL connection using only root CA Scott Ribe <[email protected]>
  0 siblings, 1 reply; 4+ messages in thread

From: AjithKumar Kannan @ 2024-09-18 15:13 UTC (permalink / raw)
  To: [email protected]

Hi Team,

Im looking for an option to connect the Postgres DB with only the root CA
file instead of all three cert files (rootca, server, and key).

I have tried the SSL mode as verify-ca in hba config and was trying to
connect the DB using only ca, but that did not succeed. In Postgres, do we
have any option to use only rootca for SSL connections?

Regards,
Ajith


^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* Re: Postgres - SSL connection using only root CA
  2024-09-18 15:13 Postgres - SSL connection using only root CA AjithKumar Kannan <[email protected]>
@ 2024-09-18 15:18 ` Scott Ribe <[email protected]>
  2024-09-20 11:27   ` Re: Postgres - SSL connection using only root CA AjithKumar Kannan <[email protected]>
  0 siblings, 1 reply; 4+ messages in thread

From: Scott Ribe @ 2024-09-18 15:18 UTC (permalink / raw)
  To: AjithKumar Kannan <[email protected]>; +Cc: [email protected]

SSL without a key is not a thing.

--
Scott Ribe
[email protected]
https://www.linkedin.com/in/scottribe/



> On Sep 18, 2024, at 9:13 AM, AjithKumar Kannan <[email protected]> wrote:
> 
> I have tried the SSL mode as verify-ca in hba config and was trying to connect the DB using only ca, but that did not succeed. In Postgres, do we have any option to use only rootca for SSL connections? 
> 






^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* Re: Postgres - SSL connection using only root CA
  2024-09-18 15:13 Postgres - SSL connection using only root CA AjithKumar Kannan <[email protected]>
  2024-09-18 15:18 ` Re: Postgres - SSL connection using only root CA Scott Ribe <[email protected]>
@ 2024-09-20 11:27   ` AjithKumar Kannan <[email protected]>
  2024-09-20 12:11     ` Re: Postgres - SSL connection using only root CA Laurenz Albe <[email protected]>
  0 siblings, 1 reply; 4+ messages in thread

From: AjithKumar Kannan @ 2024-09-20 11:27 UTC (permalink / raw)
  To: Scott Ribe <[email protected]>; +Cc: [email protected]

Hi Scott,

Thanks for your response. So can we connect using rootca and key?

Regards,
Ajith

On Wed, 18 Sept, 2024, 8:48 pm Scott Ribe, <[email protected]>
wrote:

> SSL without a key is not a thing.
>
> --
> Scott Ribe
> [email protected]
> https://www.linkedin.com/in/scottribe/
>
>
>
> > On Sep 18, 2024, at 9:13 AM, AjithKumar Kannan <[email protected]>
> wrote:
> >
> > I have tried the SSL mode as verify-ca in hba config and was trying to
> connect the DB using only ca, but that did not succeed. In Postgres, do we
> have any option to use only rootca for SSL connections?
> >
>
>


^ permalink  raw  reply  [nested|flat] 4+ messages in thread

* Re: Postgres - SSL connection using only root CA
  2024-09-18 15:13 Postgres - SSL connection using only root CA AjithKumar Kannan <[email protected]>
  2024-09-18 15:18 ` Re: Postgres - SSL connection using only root CA Scott Ribe <[email protected]>
  2024-09-20 11:27   ` Re: Postgres - SSL connection using only root CA AjithKumar Kannan <[email protected]>
@ 2024-09-20 12:11     ` Laurenz Albe <[email protected]>
  0 siblings, 0 replies; 4+ messages in thread

From: Laurenz Albe @ 2024-09-20 12:11 UTC (permalink / raw)
  To: AjithKumar Kannan <[email protected]>; Scott Ribe <[email protected]>; +Cc: [email protected]

On Fri, 2024-09-20 at 16:57 +0530, AjithKumar Kannan wrote:
> Thanks for your response. So can we connect using rootca and key?

No.  You need a certificate and the private key for that certificate.

Yours,
Laurenz Albe






^ permalink  raw  reply  [nested|flat] 4+ messages in thread

end of thread, other threads:[~2024-09-20 12:11 UTC | newest]

Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2024-09-18 15:13 Postgres - SSL connection using only root CA AjithKumar Kannan <[email protected]>
2024-09-18 15:18 ` Scott Ribe <[email protected]>
2024-09-20 11:27   ` AjithKumar Kannan <[email protected]>
2024-09-20 12:11     ` Laurenz Albe <[email protected]>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox