pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Ravi GH <mails2ravi@gmail.com>
To: depesz@depesz.com
Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: PG Database Encryption
Date: Wed, 31 May 2023 20:46:11 +0200
Message-ID: <fb0189a3cf3a3425a393aead588fb2582538cb0d.camel@cybertec.at> (raw)
In-Reply-To: <CABeo-VNUScfh_PpDs7CutsWBnCiYw3=00z2XUO=iedVB+tiCCQ@mail.gmail.com>
References: <CABeo-VNk8W89aANL=AHOjONtfaBBf-vwBK8y1g=r-qhEWPABLA@mail.gmail.com>
	<ZG82/1xYrA8Z+8PI@depesz.com>
	<CABeo-VNUScfh_PpDs7CutsWBnCiYw3=00z2XUO=iedVB+tiCCQ@mail.gmail.com>

On Mon, 2023-05-29 at 17:28 +0530, Ravi GH wrote:
> I tried the suggested option of TDE , to enable Cluster Level Encryption. I had followed the
> "Installation from Source Code" method with --with-ssl=openssl parameter to ./configure during build.
> 
> 1. Please confirm the enabling encryption is possible only by install from source with --with-ssl parameter?

Sounds right.

> 2. I could enable encryption using PG 12 with patched version provided at here , do we need to purchase
>    the product or is it possible with Postgres source shared at https://www.postgresql.org/ftp/source/v14.7/

It is free open source.
You can get the patched version for different releases here:
https://github.com/cybertec-postgresql/postgres/tags

> We are using Ubuntu 22 and we will prefer to go with TDE cluster level encryption, please advise can we try
> to implement it by install from source ( with shared source at https://www.postgresql.org/ftp/source/v14.7 )
> or need to purchasing TDE patched version is mandatory to enable cluster level encryption?

That should be here: https://github.com/cybertec-postgresql/postgres/releases/tag/PG_14_7_TDE_1_1_3

Yours,
Laurenz Albe





view thread (7+ messages)  latest in thread

Message-ID: <fb0189a3cf3a3425a393aead588fb2582538cb0d.camel@cybertec.at>
Permalink:  ../fb0189a3cf3a3425a393aead588fb2582538cb0d.camel@cybertec.at/
Also on:    postgresql.org/message-id/fb0189a3cf3a3425a393aead588fb2582538cb0d.camel@cybertec.at

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: laurenz.albe@cybertec.at, mails2ravi@gmail.com, depesz@depesz.com, pgsql-admin@lists.postgresql.org
  Subject: Re: PG Database Encryption
  In-Reply-To: <fb0189a3cf3a3425a393aead588fb2582538cb0d.camel@cybertec.at>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox