Re: [HACKERS] SSL client crt verification

2005-08-29 Thread Tom Lane
"Knut P Lehre" <[EMAIL PROTECTED]> writes: > Maybe my problem is that 7.4.8 doesn't support client authentication? The code is there but it's pretty buggy, as I recall. I'd suggest updating to 8.0 if you want to use SSL for authentication. regards, tom lane -

Re: [HACKERS] SSL client crt verification

2005-08-29 Thread Knut P Lehre
To the last sentence in my last post "Re: SSL client crt verification": "From docs I understand that I only have to set SSL = true in postgresql.conf to switch it on (in addition to providing the crt and key files)." I should have added: "...and using "hostssl" in pg_hba.conf (although "host" al

Re: [HACKERS] SSL client crt verification

2005-08-29 Thread Knut P Lehre
>> Server: 7.4.8 on Red Hat EL4. Client psql 8.0.3 on WinXP. Using a >> test server.crt and server.key, as described in 8.0 docs 16.8, I can >> activate SSL encryption (WinXP 8.0.3 psql reports "SSL Connection" >> at connect), and as expected, the server log reports that root.crt >> is not found.

Re: [HACKERS] SSL client crt verification

2005-08-26 Thread Douglas McNaught
"Knut P Lehre" <[EMAIL PROTECTED]> writes: > Server: 7.4.8 on Red Hat EL4. Client psql 8.0.3 on WinXP. Using a > test server.crt and server.key, as described in 8.0 docs 16.8, I can > activate SSL encryption (WinXP 8.0.3 psql reports "SSL Connection" > at connect), and as expected, the server log

[HACKERS] SSL client crt verification

2005-08-26 Thread Knut P Lehre
Tried doc search, pgsql-general and #postgresql. Server: 7.4.8 on Red Hat EL4. Client psql 8.0.3 on WinXP. Using a test server.crt and server.key, as described in 8.0 docs 16.8, I can activate SSL encryption (WinXP 8.0.3 psql reports "SSL Connection" at connect), and as expected, the server log re