MIME-Version: 1.0
References: 
 <CAK3_n79UmR3xETB9od9Rhpt2cd4e=1tmp9rwooTaVNO5Aw4SHg@mail.gmail.com>
 <46B9DE0A-9BD6-44B5-ABA2-2B459DD6857E@elevated-dev.com>
In-Reply-To: <46B9DE0A-9BD6-44B5-ABA2-2B459DD6857E@elevated-dev.com>
From: AjithKumar Kannan <ajithz2307@gmail.com>
Date: Fri, 20 Sep 2024 16:57:05 +0530
Message-ID: 
 <CAK3_n7_8A0k97Bt0VRYKcSBgUnfNxWao_2JhZVHhY0CvfPLiPg@mail.gmail.com>
Subject: Re: Postgres - SSL connection using only root CA
To: Scott Ribe <scott_ribe@elevated-dev.com>
Cc: pgsql-admin@lists.postgresql.org
Content-Type: multipart/alternative; boundary="00000000000044d34506228b5290"
Archived-At: 
 <https://www.postgresql.org/message-id/CAK3_n7_8A0k97Bt0VRYKcSBgUnfNxWao_2JhZVHhY0CvfPLiPg%40mail.gmail.com>
Precedence: bulk

--00000000000044d34506228b5290
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Scott,

Thanks for your response. So can we connect using rootca and key?

Regards,
Ajith

On Wed, 18 Sept, 2024, 8:48=E2=80=AFpm Scott Ribe, <scott_ribe@elevated-dev=
.com>
wrote:

> SSL without a key is not a thing.
>
> --
> Scott Ribe
> scott_ribe@elevated-dev.com
> https://www.linkedin.com/in/scottribe/
>
>
>
> > On Sep 18, 2024, at 9:13=E2=80=AFAM, AjithKumar Kannan <ajithz2307@gmai=
l.com>
> wrote:
> >
> > I have tried the SSL mode as verify-ca in hba config and was trying to
> connect the DB using only ca, but that did not succeed. In Postgres, do w=
e
> have any option to use only rootca for SSL connections?
> >
>
>

--00000000000044d34506228b5290
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto"><div style=3D"font-size:12.8px" dir=3D"auto">Hi Scott,</d=
iv><div dir=3D"auto" style=3D"font-size:12.8px"><br></div><div dir=3D"auto"=
 style=3D"font-size:12.8px">Thanks for your response. So can we connect usi=
ng rootca and key?</div><div dir=3D"auto" style=3D"font-size:12.8px"><br></=
div><div dir=3D"auto" style=3D"font-size:12.8px">Regards,</div><div dir=3D"=
auto" style=3D"font-size:12.8px">Ajith</div></div><br><div class=3D"gmail_q=
uote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, 18 Sept, 2024, 8:48=E2=
=80=AFpm Scott Ribe, &lt;<a href=3D"mailto:scott_ribe@elevated-dev.com">sco=
tt_ribe@elevated-dev.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail=
_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:=
1ex">SSL without a key is not a thing.<br>
<br>
--<br>
Scott Ribe<br>
<a href=3D"mailto:scott_ribe@elevated-dev.com" target=3D"_blank" rel=3D"nor=
eferrer">scott_ribe@elevated-dev.com</a><br>
<a href=3D"https://www.linkedin.com/in/scottribe/" rel=3D"noreferrer norefe=
rrer" target=3D"_blank">https://www.linkedin.com/in/scottribe/</a><br>
<br>
<br>
<br>
&gt; On Sep 18, 2024, at 9:13=E2=80=AFAM, AjithKumar Kannan &lt;<a href=3D"=
mailto:ajithz2307@gmail.com" target=3D"_blank" rel=3D"noreferrer">ajithz230=
7@gmail.com</a>&gt; wrote:<br>
&gt; <br>
&gt; I have tried the SSL mode as verify-ca in hba config and was trying to=
 connect the DB using only ca, but that did not succeed. In Postgres, do we=
 have any option to use only rootca for SSL connections? <br>
&gt; <br>
<br>
</blockquote></div>

--00000000000044d34506228b5290--