From: reiner peterke <zedaardv@drizzle.com>
To: Rajagopalan, Jayashree <Jayashree.Rajagopalan@emc.com>
Cc: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: How to enable SSL on client
Date: Fri, 5 Dec 2014 11:22:33 +0100
Message-ID: <D39EB846-099A-4241-B459-90238DBD1DC6@drizzle.com> (raw)
In-Reply-To: <A7A2044B8A59DA4F9F07599B3B1CA12165F1F8BB@MX101CL02.corp.emc.com>
References: <A7A2044B8A59DA4F9F07599B3B1CA12165F1F8BB@MX101CL02.corp.emc.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
> On Dec 5, 2014, at 10:37 AM, Rajagopalan, Jayashree <Jayashree.Rajagopalan@emc.com> wrote:
>
> Hi all:
>
> I’m on postgres 9.0.18. Want to enable SSL for the DB connections.
> The binaries are build including the openssl.
>
> I modified the postgresql.conf – for ssl=on.
> Copied the server.crt in the data folder.
> Modified pg_hba.conf - to add:
>
> “hostssl all all 0.0.0.0/0 md5”
>
> Getting the following errors in the logs when I start DB:
> FATAL: no pg_hba.conf entry for host "127.0.0.1", user "myuser", database "mydb", SSL off
>
> Can someone share the right procedure to enable SSL on client?
> I’ve created ~/.posgresql directory and added the client.crt and server.key.
>
> Regards
> Jayashree
Hi Jayashree,
I was recently setting this up, if i remember correctly to get the client to use SSL, i set the PGSSLMODE environment variable to prefer or require.
Unfortunately I don’t work with that system anymore so i cannot just look at the settings.
Let me know if that helps.
Reiner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: zedaardv@drizzle.com, Jayashree.Rajagopalan@emc.com
Subject: Re: How to enable SSL on client
In-Reply-To: <D39EB846-099A-4241-B459-90238DBD1DC6@drizzle.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox