If postgres has ssl enabled then it will by default negotiate to use ssl, regardless of the host or hostssl settings in pg_hba. Your client software needs to refuse ssl connections then it will fall back to a non-ssl connection so long as there exists a host setting in pg_hba. The hostssl setting in pg_hba means that it must use ssl to connect, where as the host setting in pg_hba can mean either or, depending on your client.
What client software are you using? Regards Donald Fraser ----- Original Message ----- From: "Dick Davies" <[EMAIL PROTECTED]> To: "PostgreSQL Admin" <pgsql-admin@postgresql.org> Sent: Tuesday, February 22, 2005 1:26 PM Subject: Re: [ADMIN] pg_hba.conf > * K?PFERL Robert <[EMAIL PROTECTED]> [0228 12:28]: > > According to the excelent doc, the _first_ matching entry will be used. > > If that were true, the below would work, surely? > > > C:\> I have this: > > C:\> > > C:\> [EMAIL PROTECTED]:postgresql80-server$ cat /opt/pgsql/data/pg_hba.conf > > C:\> # TYPE DATABASE USER IP-ADDRESS METHOD > > C:\> local all all trust > > C:\> host all all 10.2.3.4/32 md5 > > C:\> hostssl all all 0.0.0.0/0 md5 > > -- > 'Interesting. No, wait, the other thing - Tedious.' > -- Bender > Rasputin :: Jack of All Trades - Master of Nuns > > ---------------------------(end of broadcast)--------------------------- > TIP 5: Have you checked our extensive FAQ? > > http://www.postgresql.org/docs/faq > ---------------------------(end of broadcast)--------------------------- TIP 6: Have you searched our list archives? http://archives.postgresql.org
