From pedroigor@aip.com.br Wed Jan  22 12:08:08 2003
Received: from localhost (postgresql.org [64.49.215.8])
	by postgresql.org (Postfix) with ESMTP id B6FB6475CA9
	for <pgsql-sql@postgresql.org>; Wed, 22 Jan 2003 07:08:08 -0500 (EST)
Received: from server45.aip.com.br (unknown [200.199.192.5])
	by postgresql.org (Postfix) with ESMTP id 055D9475BC3
	for <pgsql-sql@postgresql.org>; Wed, 22 Jan 2003 07:08:06 -0500 (EST)
Received: from DEV01 ([10.1.0.11]) by server45.aip.com.br with SMTP (Microsoft
	Exchange Internet Mail Service Version 5.5.2653.13)
	id DM5YWQZX; Wed, 22 Jan 2003 10:10:29 -0300
Message-ID: <001701c2c20d$bb1564a0$0b00010a@aip.com.br>
From: "Pedro Igor Craveiro e Silva" <pedroigor@aip.com.br>
To: <pgsql-sql@postgresql.org>
Subject: PostgreSQL + SSL
Date: Wed, 22 Jan 2003 09:59:33 -0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0014_01C2C1FC.F6E18790"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700
X-Virus-Scanned: by AMaViS new-20020517
X-Archive-Number: 200301/333
X-Sequence-Number: 11198

This is a multi-part message in MIME format.

------=_NextPart_000_0014_01C2C1FC.F6E18790
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I=B4m trying to config PG with SSL, but i got a error. I create the key and=
 the certificate and put both in $PGDATA directory.
I also enabled the ssl option in postgresql.conf.
But when i run postmaster i got a error saying that server.key has wrong pe=
rmissions.

Thanks,

Pedro Igor

------=_NextPart_000_0014_01C2C1FC.F6E18790
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2920.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>I=B4m trying to config PG with SSL, but i =
got a=20
error. I create the key and the certificate and put both in $PGDATA=20
directory.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>I also enabled the ssl option in=20
postgresql.conf.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>But when i run postmaster i got a error sa=
ying that=20
server.key has wrong permissions.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Thanks,</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Pedro Igor</FONT></DIV></BODY></HTML>

------=_NextPart_000_0014_01C2C1FC.F6E18790--




From bhuvansql@myrealbox.com Thu Jan  23 09:54:34 2003
Received: from localhost (postgresql.org [64.49.215.8])
	by postgresql.org (Postfix) with ESMTP id 96551476362
	for <pgsql-sql@postgresql.org>; Thu, 23 Jan 2003 04:54:34 -0500 (EST)
Received: from Gateway.bksys.co.in (unknown [61.1.200.231])
	by postgresql.org (Postfix) with ESMTP id A259A47630C
	for <pgsql-sql@postgresql.org>; Thu, 23 Jan 2003 04:54:29 -0500 (EST)
Received: from bksys.co.in (mail.bksys.co.in [192.168.1.1])
	by Gateway.bksys.co.in (8.11.6/8.11.6) with ESMTP id h0N9uBu23590;
	Thu, 23 Jan 2003 15:26:11 +0530
Received: from Bhuvan.bksys.co.in (Bhuvan.bksys.co.in [192.168.1.71])
	by bksys.co.in (8.11.6/8.8.5) with ESMTP id h0N9sQS09036;
	Thu, 23 Jan 2003 15:24:26 +0530
Date: Thu, 23 Jan 2003 15:44:55 +0530 (IST)
From: Bhuvan A <bhuvansql@myrealbox.com>
X-X-Sender: bhuvan@Bhuvan.bksys.co.in
To: Pedro Igor Craveiro e Silva <pedroigor@aip.com.br>
Cc: pgsql-sql@postgresql.org
Subject: Re: PostgreSQL + SSL
In-Reply-To: <001701c2c20d$bb1564a0$0b00010a@aip.com.br>
Message-ID: <Pine.LNX.4.44.0301231537260.2491-100000@Bhuvan.bksys.co.in>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: 8BIT
X-Virus-Scanned: by AMaViS new-20020517
X-Archive-Number: 200301/353
X-Sequence-Number: 11218


> I´m trying to config PG with SSL, but i got a error. I create the key
> and the certificate and put both in $PGDATA directory. I also enabled
> the ssl option in postgresql.conf. But when i run postmaster i got a
> error saying that server.key has wrong permissions.

It reports the error in either of the below cases:

1. If the file permission is not -r--r--r--.
2. If the certificate and the private key are invalid.  

The clear advice is available in the documentation itself. Try out
http://developer.postgresql.org/docs/postgres/ssl-tcp.html for details.

regards,
bhuvaneswaran






From pgman@candle.pha.pa.us Sun Jan  26 23:15:58 2003
Received: from localhost (postgresql.org [64.49.215.8])
	by postgresql.org (Postfix) with ESMTP id B3844475843
	for <pgsql-sql@postgresql.org>; Sun, 26 Jan 2003 18:15:58 -0500 (EST)
Received: from candle.pha.pa.us (momjian.navpoint.com [207.106.42.251])
	by postgresql.org (Postfix) with ESMTP id 4A6CB47580B
	for <pgsql-sql@postgresql.org>; Sun, 26 Jan 2003 18:15:57 -0500 (EST)
Received: (from pgman@localhost)
	by candle.pha.pa.us (8.11.6/8.10.1) id h0QNFX515682;
	Sun, 26 Jan 2003 18:15:33 -0500 (EST)
From: Bruce Momjian <pgman@candle.pha.pa.us>
Message-Id: <200301262315.h0QNFX515682@candle.pha.pa.us>
Subject: Re: PostgreSQL + SSL
In-Reply-To: <Pine.LNX.4.44.0301231537260.2491-100000@Bhuvan.bksys.co.in>
To: Bhuvan A <bhuvansql@myrealbox.com>
Date: Sun, 26 Jan 2003 18:15:33 -0500 (EST)
Cc: Pedro Igor Craveiro e Silva <pedroigor@aip.com.br>,
	pgsql-sql@postgresql.org
X-Mailer: ELM [version 2.4ME+ PL99 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
X-Virus-Scanned: by AMaViS new-20020517
X-Archive-Number: 200301/419
X-Sequence-Number: 11284


Actually, the new 7.3.1 error message is:

        if (!S_ISREG(buf.st_mode) || (buf.st_mode & 0077) ||
            buf.st_uid != getuid())
        {
            postmaster_error("bad permissions on private key file (%s)\n"
"File must be owned by the proper user and must have no permissions for\n"
"\"group\" or \"other\".", fnbuf);
            ExitPostmaster(1);
        }


so that should be clearer for people when it fails.  7.3 had similar
restrictions, but reported the failure more concisely.

---------------------------------------------------------------------------

Bhuvan A wrote:
> 
> > I?m trying to config PG with SSL, but i got a error. I create the key
> > and the certificate and put both in $PGDATA directory. I also enabled
> > the ssl option in postgresql.conf. But when i run postmaster i got a
> > error saying that server.key has wrong permissions.
> 
> It reports the error in either of the below cases:
> 
> 1. If the file permission is not -r--r--r--.
> 2. If the certificate and the private key are invalid.  
> 
> The clear advice is available in the documentation itself. Try out
> http://developer.postgresql.org/docs/postgres/ssl-tcp.html for details.
> 
> regards,
> bhuvaneswaran
> 
> 
> 
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
>     (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
> 

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073