Re: [ADMIN] PostgreSQL with SSL

2010-04-20 Thread Jose Berardo
Hello, On Fri, Apr 16, 2010 at 4:34 AM, "Martin Münstermann" wrote: > Hello. > >> > > I'm trying to use the java keytool in place of openssl. >> > > - I believe that it not possible to start the PostgreSQL server >> without >> > > openssl (and ssl-dev package in debian), is it correct? >> > >> >

Re: [ADMIN] PostgreSQL with SSL

2010-04-16 Thread Jose Berardo
Hello, On Thu, Apr 15, 2010 at 6:30 PM, Tom Lane wrote: > Jose Berardo writes: - Is it possible to store the server.key in a ciphered  file with > >>> No. > >> I believe that it may be a good idea, it may bring another security level, > > Not really. > >> Just saving the private key file

Re: [ADMIN] PostgreSQL with SSL

2010-04-16 Thread Martin Münstermann
Hello. > > > I'm trying to use the java keytool in place of openssl. > > > - I believe that it not possible to start the PostgreSQL server > without > > > openssl (and ssl-dev package in debian), is it correct? > > > > Yes, I don't think the java keytool works. > > Oh, the documentation defeated

Re: [ADMIN] PostgreSQL with SSL

2010-04-15 Thread Tom Lane
Jose Berardo writes: >>> - Is it possible to store the server.key in a ciphered file with >> No. > I believe that it may be a good idea, it may bring another security level, Not really. > Just saving the private key file inside the cluster with no privilegies for > other users (the server sug

Re: [ADMIN] PostgreSQL with SSL

2010-04-15 Thread Jose Berardo
Hello. As I have told, I'm new on using PostgreSQL over SSL connections. I have worked with SSL before, but I'm really far from being an expert about it. Sorry for asking you before read all the documentation, I have looked for It in wrong pages and didn't find anything. After writing, I read a l

Re: [ADMIN] PostgreSQL with SSL

2010-04-15 Thread Martin Münstermann
Hello. > > don't know how to export the private key and when I use the keytool > > certificate, the server crashes with this message: > > > > FATAL: could not load server certificate file "server.crt": no start > line > > > > Sorry about too many questions, but anyone can help me to understand

Re: [ADMIN] PostgreSQL with SSL

2010-04-14 Thread Bruce Momjian
Jose Berardo wrote: > Hi, > > I'm new on using SSL in PostgreSQL. > > I've created a self-signed certificate using openssl and started the server > with ssl suport. > > But I have some question, can you help me? > > - There is any parameter to configure the path (and name) to certificate > (ser

[ADMIN] PostgreSQL with SSL

2010-04-12 Thread Jose Berardo
Hi, I'm new on using SSL in PostgreSQL. I've created a self-signed certificate using openssl and started the server with ssl suport. But I have some question, can you help me? - There is any parameter to configure the path (and name) to certificate (server.crt) and private key (server.key) like

[ADMIN] PostgreSQL with SSL

2010-04-12 Thread Jose Berardo
Hi, I'm new on using SSL in PostgreSQL. I've created a self-signed certificate using openssl and started the server with ssl suport. But I have some question, can you help me? - There is any parameter to configure the path (and name) to certificate (server.crt) and private key (server.key) like

Re: [ADMIN] PostgreSQL with SSL

2006-05-28 Thread Tom Lane
"=?ISO-8859-1?Q?Elvis_Henr=EDquez?=" <[EMAIL PROTECTED]> writes: > I'm trying to upgrade my PostgreSQL 8.1.0 instalation in Red Hat Linux 9 ( > PostgreSQL 8.1.0 on i686-pc-linux-gnu, compiled by GCC gcc (GCC) > 3.2.220030222 (Red Hat Linux > 3.2.2-5) ) to version 8.1.4 cause of security patch jus

[ADMIN] PostgreSQL with SSL

2006-05-28 Thread Elvis Henríquez
Greetings list. I'm trying to upgrade my PostgreSQL 8.1.0 instalation in Red Hat Linux 9 (  PostgreSQL 8.1.0 on i686-pc-linux-gnu, compiled by GCC gcc (GCC) 3.2.2 20030222 (Red Hat Linux 3.2.2-5)   ) to version 8.1.4 cause of security patch just released. Now I want to increase security in my con