From: Jose Berardo <joseberardo@gmail.com>
To: pgsql-admin@postgresql.org
Subject: PostgreSQL with SSL
Date: Mon, 12 Apr 2010 13:36:43 -0300
Message-ID: <g2m9009a4451004120936w193ca856kdfd22b3eef7dc589@mail.gmail.com> (raw)
In-Reply-To: <p2w9009a4451004120935l1204e4b3o5139b2781b441b00@mail.gmail.com>
References: <p2w9009a4451004120935l1204e4b3o5139b2781b441b00@mail.gmail.com>
Hi,
I'm new on using SSL in PostgreSQL.
I've created a self-signed certificate using openssl and started the server
with ssl suport.
But I have some question, can you help me?
- There is any parameter to configure the path (and name) to certificate
(server.crt) and private key (server.key) like hba_file or ident_file in
postgresql.conf or any other?
- Is it possible to store the server.key in a ciphered file with triple-des
and configure the PostgreSQL to use a simetric-key to open it when it's
necessary?
Maybe I'm wrong but my server only works with I plain private key.
I'm trying to use the java keytool in place of openssl.
- I believe that it not possible to start the PostgreSQL server without
openssl (and ssl-dev package in debian), is it correct?
- When I create keys and certificates with keytool, it creates a java
keystore to store everything. I know how to export the certificate but I
don't know how to export the private key and when I use the keytool
certificate, the server crashes with this message:
FATAL: could not load server certificate file "server.crt": no start line
Sorry about too many questions, but anyone can help me to understand more
about ssl in PostgreSQL?
--
Regards,
Jose Berardo
--
Atenciosamente,
Jose Berardo
Especializa Treinamentos
www.especializa.com.br
81 3465.0032
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: joseberardo@gmail.com
Subject: Re: PostgreSQL with SSL
In-Reply-To: <g2m9009a4451004120936w193ca856kdfd22b3eef7dc589@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox