From: Ray Stell <stellr@cns.vt.edu>
To: pgsql-admin@postgresql.org
Subject: ssl client cert authentication
Date: Mon, 1 Nov 2010 12:14:26 -0400
Message-ID: <20101101161426.GA12503@cns.vt.edu> (raw)
Someone asked about ssl client cert auth recently. I got
this to work, but something tripped me up.
http://developer.postgresql.org/pgdocs/postgres/ssl-tcp.html
states (very clearly, btw) that, "To require the client to supply a
trusted certificate, place certificates of the certificate authorities
(CAs) you trust in the file root.crt in the data directory." I had
ASS-U-MEd that root.crt would go in .postgresql as it does for encryption.
This begs the question, why two copies of the same file?
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: stellr@cns.vt.edu, pgsql-admin@postgresql.org
Subject: Re: ssl client cert authentication
In-Reply-To: <20101101161426.GA12503@cns.vt.edu>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox