From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Dhirendra Singh <dhirendraks@gmail.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: Difference between host, hostssl and hostnossl connection type
Date: Fri, 25 Nov 2022 08:09:52 +0100
Message-ID: <e83f6d8114aa305d95005da30da512446a574e75.camel@cybertec.at> (raw)
In-Reply-To: <CAEyh4sYOTAZiSBMXCocd-poP-PrCtp_emDsx2GWSPUbzapHBGg@mail.gmail.com>
References: <CAEyh4sYOTAZiSBMXCocd-poP-PrCtp_emDsx2GWSPUbzapHBGg@mail.gmail.com>
On Fri, 2022-11-25 at 10:51 +0530, Dhirendra Singh wrote:
> I am using postgres version 14.
> I would like to know what is the difference between host, hostssl and hostnossl connection type.
> According to documentation,
> host => This record matches connection attempts made using TCP/IP. host records match SSL or non-SSL
> connection attempts as well as GSSAPI encrypted or non-GSSAPI encrypted connection
> attempts.
> hostssl => This record matches connection attempts made using TCP/IP, but only when the connection
> is made with SSL encryption.
> hostnossl => This record type has the opposite behavior of hostssl; it only matches connection
> attempts made over TCP/IP that do not use SSL.
>
> I provided cert authentication method for host type connection. but i get error and postgres
> does not come up. Following is the error message i get.
> LOG: cert authentication is only supported on hostssl connections.
"cert" authentication is authentication with SSL (TLS) certificates.
You cannot use that authentication without SSL. That is why you have to use "hostssl".
Yours,
Laurenz Albe
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: laurenz.albe@cybertec.at, dhirendraks@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Difference between host, hostssl and hostnossl connection type
In-Reply-To: <e83f6d8114aa305d95005da30da512446a574e75.camel@cybertec.at>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox