Re: using ssl some of the time - Mailing list pgsql-admin

From Bruce Momjian
Subject Re: using ssl some of the time
Date
Msg-id 200307230424.h6N4OT626932@candle.pha.pa.us
Whole thread Raw
In response to using ssl some of the time  (Charles Hornberger <charlie@hss.caltech.edu>)
Responses Re: using ssl some of the time  (Charles Hornberger <charlie@hss.caltech.edu>)
List pgsql-admin
Charles Hornberger wrote:
> Am I right in interpreting this to mean that I either have to use SSL
> all the time or none of the time?  I'm especially tempted to believe
> this might be the case after seeing this item in the "Clients" section
> of http://developer.postgresql.org/todo.php:
>
>    - Allow SSL-enabled clients to turn off SSL transfers
>
> Does that mean that, if SSL is enabled for the postmaster, the client
> will always be forced to use SSL? Or is there something I need to do to
> force the client to NOT use SSL?

Right, it will use SSL if possible, so if both client and server are SSL
enabled, SSL will be used. 7.4 will allow you to control that.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

pgsql-admin by date:

Previous
From: Renney Thomas
Date:
Subject: Re: Replication/Failover/HA solution
Next
From: Charles Hornberger
Date:
Subject: Re: using ssl some of the time