I did a basic Postgres install on Ubuntu VM this evening and noticed that SSL was already setup on the database server. I popped over to PgAdmin on OSX and select SSL on the connection and it was automagic as far as I could tell.
I've not sniffed any traffic at this point to verify that SSL was working. - David On Oct 20, 2009, at 9:49 PM, Adrian Klaver wrote: > On Tuesday 20 October 2009 7:28:15 pm John wrote: >> On Tuesday 20 October 2009 07:00:30 pm David Henry wrote: >>> Just a quick note. I found the following: >>> >>> "The 2.0Beta binaries DO have SSL support and would recommend them >>> even tho >>> it has 'Beta' in the name. >>> >>> >>> To use SSL, add the following parameter to the connect string: >>> sslmode= >>> disable - No SSL >>> allow - First try non SSL, then try SSL >>> prefer - First try SSL, then non-SSL connection >>> require - Only try SSL connection >>> ie: >>> >>> # Connect up to the test database using only SSL support >>> # >>> c = psycopg2.connect("host=test user=test dbname=test >>> sslmode=require") >>> " >>> So it looks fairly straight forward. >>> >>> -David >>> >>> On Oct 20, 2009, at 8:17 PM, John wrote: >>>> On Tuesday 20 October 2009 04:35:32 pm David Henry wrote: >>>>> Hi, >>>>> >>>>> I am new to the list. Does Dabo support PostgreSQL or MySQL SSL >>>>> connections? >>>>> >>>>> I didn't see this option on the Connection Manager. >>>>> >>>>> Thanks, >>>>> David >>>> >>>> I can say that the connection string does not pass the SSL >>>> setting for >>>> Postgres because I did not account for it. Adding the setting >>>> would >>>> not be >>>> difficult. But I wonder if it would work? >>>> >>>> I tried to find doc's on SSL for psycopg2 and discovered little. >>>> If >>>> psycopg2 >>>> is the client. How does it handle the communication to process the >>>> certificate information. >>>> >>>> I don't have a postgres install that uses SSL. So I know little >>>> about what is >>>> required. If you know what is required I'm willing to work with >>>> you >>>> (or >>>> anyone that has the information) to get the support working. >>>> >>>> Johnf >> >> David, do you have a ssl Postgres database setup? >> >> I found that same link earlier. Also note that you might have to >> change >> the "setup.py" for psycopg2 by setting SSLMode = 1. But does >> psycopg2 >> handle all the communications? I'm unable to determine that >> information. >> IOW what else is needed - maybe nothing. >> >> Here are my questions: >> >> 1. Does postgres act as the SSL server - I doubt that. > > Yes. See here; > http://www.postgresql.org/docs/8.4/interactive/ssl-tcp.html > >> 2. Does psycopg2 handle all the communications from the SSL server? > > See link above. Also: > http://www.postgresql.org/docs/8.4/interactive/libpq-ssl.html > > > Basically Postgres takes care of it. The only role Psycopg plays is > to set the > ssl mode of the connection. >> >> >> Johnf > > > > -- > Adrian Klaver > akla...@comcast.net > > [excessive quoting removed by server] _______________________________________________ Post Messages to: Dabo-users@leafe.com Subscription Maintenance: http://leafe.com/mailman/listinfo/dabo-users Searchable Archives: http://leafe.com/archives/search/dabo-users This message: http://leafe.com/archives/byMID/0f22bfbc-bbd8-4615-a649-6c477ccf5...@gmail.com