Message-ID: <e83f6d8114aa305d95005da30da512446a574e75.camel@cybertec.at>
Subject: Re: Difference between host, hostssl and hostnossl connection type
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Dhirendra Singh <dhirendraks@gmail.com>, pgsql-admin@lists.postgresql.org
Date: Fri, 25 Nov 2022 08:09:52 +0100
In-Reply-To: 
 <CAEyh4sYOTAZiSBMXCocd-poP-PrCtp_emDsx2GWSPUbzapHBGg@mail.gmail.com>
References: 
	<CAEyh4sYOTAZiSBMXCocd-poP-PrCtp_emDsx2GWSPUbzapHBGg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.42.4 (3.42.4-2.fc35) 
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Archived-At: 
 <https://www.postgresql.org/message-id/e83f6d8114aa305d95005da30da512446a574e75.camel%40cybertec.at>
Precedence: bulk

On Fri, 2022-11-25 at 10:51 +0530, Dhirendra Singh wrote:
> I am using postgres version 14.
> I would like to know what is the difference between host, hostssl and hostnossl connection type.
> According to documentation,
> host => This record matches connection attempts made using TCP/IP. host records match SSL or non-SSL
>         connection attempts as well as GSSAPI encrypted or non-GSSAPI encrypted connection
> attempts.
> hostssl => This record matches connection attempts made using TCP/IP, but only when the connection
>            is made with SSL encryption.
> hostnossl => This record type has the opposite behavior of hostssl; it only matches connection
>              attempts made over TCP/IP that do not use SSL.
> 
> I provided cert authentication method for host type connection. but i get error and postgres
> does not come up. Following is the error message i get.
> LOG: cert authentication is only supported on hostssl connections.

"cert" authentication is authentication with SSL (TLS) certificates.
You cannot use that authentication without SSL.  That is why you have to use "hostssl".

Yours,
Laurenz Albe