pg.ddx.io pgsql-sql@postgresql.org mailing list archive
help / color / mirror / Atom feedPostgreSQL + SSL
3+ messages / 3 participants
[nested] [flat]
* PostgreSQL + SSL
@ 2003-01-22 11:59 Pedro Igor Craveiro e Silva <pedroigor@aip.com.br>
0 siblings, 1 reply; 3+ messages in thread
From: Pedro Igor Craveiro e Silva @ 2003-01-22 11:59 UTC (permalink / raw)
To: pgsql-sql
I´m trying to config PG with SSL, but i got a error. I create the key and the certificate and put both in $PGDATA directory.
I also enabled the ssl option in postgresql.conf.
But when i run postmaster i got a error saying that server.key has wrong permissions.
Thanks,
Pedro Igor
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: PostgreSQL + SSL
@ 2003-01-23 10:14 Bhuvan A <bhuvansql@myrealbox.com>
parent: Pedro Igor Craveiro e Silva <pedroigor@aip.com.br>
0 siblings, 1 reply; 3+ messages in thread
From: Bhuvan A @ 2003-01-23 10:14 UTC (permalink / raw)
To: Pedro Igor Craveiro e Silva <pedroigor@aip.com.br>; +Cc: pgsql-sql
> I´m trying to config PG with SSL, but i got a error. I create the key
> and the certificate and put both in $PGDATA directory. I also enabled
> the ssl option in postgresql.conf. But when i run postmaster i got a
> error saying that server.key has wrong permissions.
It reports the error in either of the below cases:
1. If the file permission is not -r--r--r--.
2. If the certificate and the private key are invalid.
The clear advice is available in the documentation itself. Try out
http://developer.postgresql.org/docs/postgres/ssl-tcp.html for details.
regards,
bhuvaneswaran
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: PostgreSQL + SSL
@ 2003-01-26 23:15 Bruce Momjian <pgman@candle.pha.pa.us>
parent: Bhuvan A <bhuvansql@myrealbox.com>
0 siblings, 0 replies; 3+ messages in thread
From: Bruce Momjian @ 2003-01-26 23:15 UTC (permalink / raw)
To: Bhuvan A <bhuvansql@myrealbox.com>; +Cc: Pedro Igor Craveiro e Silva <pedroigor@aip.com.br>; pgsql-sql
Actually, the new 7.3.1 error message is:
if (!S_ISREG(buf.st_mode) || (buf.st_mode & 0077) ||
buf.st_uid != getuid())
{
postmaster_error("bad permissions on private key file (%s)\n"
"File must be owned by the proper user and must have no permissions for\n"
"\"group\" or \"other\".", fnbuf);
ExitPostmaster(1);
}
so that should be clearer for people when it fails. 7.3 had similar
restrictions, but reported the failure more concisely.
---------------------------------------------------------------------------
Bhuvan A wrote:
>
> > I?m trying to config PG with SSL, but i got a error. I create the key
> > and the certificate and put both in $PGDATA directory. I also enabled
> > the ssl option in postgresql.conf. But when i run postmaster i got a
> > error saying that server.key has wrong permissions.
>
> It reports the error in either of the below cases:
>
> 1. If the file permission is not -r--r--r--.
> 2. If the certificate and the private key are invalid.
>
> The clear advice is available in the documentation itself. Try out
> http://developer.postgresql.org/docs/postgres/ssl-tcp.html for details.
>
> regards,
> bhuvaneswaran
>
>
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
> (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2003-01-26 23:15 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2003-01-22 11:59 PostgreSQL + SSL Pedro Igor Craveiro e Silva <pedroigor@aip.com.br>
2003-01-23 10:14 ` Bhuvan A <bhuvansql@myrealbox.com>
2003-01-26 23:15 ` Bruce Momjian <pgman@candle.pha.pa.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox