Re: PostgreSQL configurable SSL key checking - Mailing list pgsql-hackers

From Alvaro Herrera
Subject Re: PostgreSQL configurable SSL key checking
Date
Msg-id 20050905192701.GA20677@surnet.cl
Whole thread Raw
In response to PostgreSQL configurable SSL key checking  (Simon de Hartog <simon.postgresql@dehartog.nl>)
Responses Re: PostgreSQL configurable SSL key checking
Re: PostgreSQL configurable SSL key checking
List pgsql-hackers
On Mon, Sep 05, 2005 at 09:03:06PM +0200, Simon de Hartog wrote:

> I have added all the users these applications run as to a group called
> "ssl". Permissions on the private key are owned by root, group ssl,
> protection rw-r----- (640). When I tell PostgreSQL to use this key with
> certificate (by using symlinks from server.key and server.crt in the
> postgreSQL data dir) it tells me that owner and permissions are wrong.
> 
> How can I use this certificate and key for PostgreSQL (without copying
> the key and changing owner and permissions etc, because then the whole
> idea of centrally coordinated certificates is gone)?

Did you try using a hardlink instead of a symlink?

-- 
Alvaro Herrera -- Valdivia, Chile         Architect, www.EnterpriseDB.com
"Ninguna manada de bestias tiene una voz tan horrible como la humana" (Orual)


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: PostgreSQL configurable SSL key checking
Next
From: Tom Lane
Date:
Subject: Re: 4D Geometry