Jira (PDB-765) Puppetdb connexion to postgresql using client certificate

[Kenneth Barber (JIRA)]

Title: Message Title

Kenneth Barber commented on an issue   Re: Puppetdb connexion to postgresql using client certificate Justin Holguin I can release the module whenever we need to I guess. What particular reason do you have for having to turn off the db management in the PDB module? I'm just curious because it looked like all the settings you have in that GIST are correct. Oh and BTW, you're not quite following the route Brian Cain had laid out, in particular his instructions did not require modifying the global JKS, which is actually a bit of a bad thing. Instead it uses the libpqfactory method, you can see this outlined here: http://docs.puppetlabs.com/puppetdb/master/postgres_ssl.html#using-your-own-self-signed-ca. Having another look at that documentation, ideally even the Puppet cert instructions need to be modified to use this really instead of JKS. I think I made a mess of the documentation review, I guess I wasn't paying enough attention at the time. If you want a better explanation ping me on hipchat or something. Add Comment   PuppetDB / PDB-765 Puppetdb connexion to postgresql using client certificate For people wanting to authenticate on a posgresql server, using a X509 client certificate, this procedure might help. This procedure does it in the java way, ie it take a jks store, not pem files. First create a jks with the private key for your account and put in it all the needed certificates in the chain (both server and user). The cn for user cert... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.