Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sr2Tc-00F3v5-5U for pgsql-admin@arkaria.postgresql.org; Wed, 18 Sep 2024 21:44:44 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1sr2Ta-00GN50-Bt for pgsql-admin@arkaria.postgresql.org; Wed, 18 Sep 2024 21:44:42 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sr2Ta-00GN49-0S for pgsql-admin@lists.postgresql.org; Wed, 18 Sep 2024 21:44:42 +0000 Received: from mail-vk1-xa33.google.com ([2607:f8b0:4864:20::a33]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1sr2TX-001t9x-FE for pgsql-admin@lists.postgresql.org; Wed, 18 Sep 2024 21:44:41 +0000 Received: by mail-vk1-xa33.google.com with SMTP id 71dfb90a1353d-5010c0e16baso70534e0c.1 for ; Wed, 18 Sep 2024 14:44:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1726695878; x=1727300678; darn=lists.postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=oetxOvd4vgIpPnWFj/iVjxwI2l2/qIzv8t+tdCR+hGo=; b=Har2qoEw6Fm1dQwQh4S9rvH9o5dGKer53cEoXUmY2JR8uEtXDAEL3BfoA3CPL+bk1H Q9mx0VjIgV/LfvzTYHkS/sMv9e14uxqZ1XrwnCiF5/x2VsR/29gn4+RdBVMlDQ0aaDxj Azq4CTCeWVW8gb8WGIYAWacPlj/XwerKNxOyhnkKMsL2IfFADvBBrY4EkkoYKn7NST4K UtEQkNaSFdVXAOR/MiOJhkgzS5Bl7ZQVmt1YjDASCXjY0VOLJ3Irb4sfrexj+JEwzgdz lB1W7x+FfQFX6s3ysqskxrs+Pa+qsPwRHtc5XgtuL/WGtCsleZsa4HW0rpJW0wQQl8Ri 0hYA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1726695878; x=1727300678; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=oetxOvd4vgIpPnWFj/iVjxwI2l2/qIzv8t+tdCR+hGo=; b=rfAeaZX/S0FfUD7ORQ+ajLzVSpG7EdxmxlKsweG2DTb9hlCKGdcPmybMySFH37KsHe P8Hr8THYC995mQULjzV8Sqd2UOvKgyc82kkGbZ9AxaS7NbZWg8de3d0BJf/EOwLUnul+ X5Wj7X7UAgac9YDsY6XYm8O4528cOw+bKweD9kPbOPJdsk2jZ7jSM20IBqCz02Hugcj/ TxtdrCxQYAdouT8f+3rz267uEy2R9prvpV7ntnf9PegaVA0C8tdoUNrB9aRsbxo9ka79 QQ8aQoSGlhSptatpDKbrnbjLf7hw3MGFDsN4rcqXNJk6sUvhDCZCQn/8r+2xYwQmLq28 +tcQ== X-Gm-Message-State: AOJu0YyCowB31nXVnJ8Upyu6zgfNOSR2DdtIyjh/seRWxT/f/1pMHGoY e+AvjoR0agWFwihP9AqAB3XiAklReUr9caWvEgWxQZ4UBW/DtxZPYYqaznmhQrJFEdGA3z920hu OA+XRZd9+vgGEJlEWzFUjcRIoDvoi4w== X-Google-Smtp-Source: AGHT+IGis8P2U+M4z1yQrJV52jTHOn8N1K5Hw/va45XX8WnoUzkDiQXLltBppOLuSaha0WtnX3EPaDLkdQ0ygddH8JI= X-Received: by 2002:a05:6122:892:b0:503:1ca5:261e with SMTP id 71dfb90a1353d-5032d3f80f4mr23284681e0c.4.1726695877665; Wed, 18 Sep 2024 14:44:37 -0700 (PDT) MIME-Version: 1.0 References: <7357c221-0d49-422e-83d6-fda984822408@ewie.name> In-Reply-To: <7357c221-0d49-422e-83d6-fda984822408@ewie.name> From: tiamoh m Date: Wed, 18 Sep 2024 17:44:25 -0400 Message-ID: Subject: Re: SSL Connection String To: Erik Wienhold Cc: pgsql-admin@lists.postgresql.org Content-Type: multipart/alternative; boundary="0000000000006c6e8c06226bb642" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --0000000000006c6e8c06226bb642 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thank you Erik. On Wed, Sep 18, 2024 at 1:53=E2=80=AFPM Erik Wienhold wrot= e: > On 2024-09-18 17:08 +0200, tiamoh m wrote: > > I wish to find out the connection string to only establish ssl connecti= on > > after it is set up. > > Use sslmode=3Drequire (or verify-ca/verify-full if necessary) for that: > > https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-= STATEMENTS > > -- > Erik > --0000000000006c6e8c06226bb642 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thank you Erik.

On Wed, Sep 18, 2024 at 1:53=E2=80=AFPM Eri= k Wienhold <ewie@ewie.name> wro= te:
On 2024-09-1= 8 17:08 +0200, tiamoh m wrote:
> I wish to find out the connection string to only establish ssl connect= ion
> after it is set up.

Use sslmode=3Drequire (or verify-ca/verify-full if necessary) for that:
https://www.postg= resql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS

--
Erik
--0000000000006c6e8c06226bb642--