pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: lejeczek <peljasz@yahoo.co.uk>
Cc: pgsql-admin@postgresql.org
Subject: Re: Replication & TLS encryption - how?
Date: Thu, 08 Apr 2021 04:59:07 +0200
Message-ID: <d7c701fd45117f1281f7342be412c5297610755f.camel@cybertec.at> (raw)
In-Reply-To: <7e89a9be-e788-23fc-6b1b-2ee67586d452@yahoo.co.uk>
References: <54a5bf2b-0504-02c0-e5a2-ab24173abcdb.ref@yahoo.co.uk>
	<54a5bf2b-0504-02c0-e5a2-ab24173abcdb@yahoo.co.uk>
	<1596782.1617813374@sss.pgh.pa.us>
	<7e89a9be-e788-23fc-6b1b-2ee67586d452@yahoo.co.uk>

On Wed, 2021-04-07 at 21:12 +0100, lejeczek wrote:
> On 07/04/2021 17:36, Tom Lane wrote:
> > lejeczek <peljasz@yahoo.co.uk> writes:
> > > A novice here thus please go easy on me as I ask this - I
> > > see docs/howtos all over the place be those either talk of
> > > encryption or replication. I failed to find one which blend
> > > these two concepts together - sure it's possible to pgSQL
> > > replication encrypted, right?
> > Replication connections work exactly like normal sessions for
> > this purpose.  Just make sure you set any required parameters
> > in the standby's connection string.
> > 
> > 			regards, tom lane
> > 
> > 
> Thanks. Would you know how '|clientcert=1' fits into the 
> equation?
> With it present in pg_hba.conf pgSQL was not happy saying:
> 
> FATAL:  connection requires a valid client certificate.

Then include "sslcert" in "primary_conninfo".

You can use all the libpq connection parameters:
https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-PARAMKEYWORDS

Yours,
Laurenz Albe
-- 
Cybertec | https://www.cybertec-postgresql.com






view thread (10+ messages)  latest in thread

Message-ID: <d7c701fd45117f1281f7342be412c5297610755f.camel@cybertec.at>
Permalink:  ../d7c701fd45117f1281f7342be412c5297610755f.camel@cybertec.at/
Also on:    postgresql.org/message-id/d7c701fd45117f1281f7342be412c5297610755f.camel@cybertec.at

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: laurenz.albe@cybertec.at, peljasz@yahoo.co.uk
  Subject: Re: Replication & TLS encryption - how?
  In-Reply-To: <d7c701fd45117f1281f7342be412c5297610755f.camel@cybertec.at>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox