Re: PKI/SSL Client/Server Certificate Authentication - Mailing list pgsql-admin

From Andrew Sullivan
Subject Re: PKI/SSL Client/Server Certificate Authentication
Date
Msg-id 20060113211529.GC10098@phlogiston.dyndns.org
Whole thread Raw
In response to Re: PKI/SSL Client/Server Certificate Authentication  ("Brian A. Seklecki" <lavalamp@spiritual-machines.org>)
List pgsql-admin
On Fri, Jan 13, 2006 at 12:19:38PM -0500, Brian A. Seklecki wrote:
> In short, it's a deterrent to hackers and a convenience to admins.  But we

Not just that.  Unless something big has changed when I wasn't
looking, the jdbc driver can't use the .pgpass mechanism yet; but it
_can_ use SSL, except that it doesn't have the ability to validate
via certs.  So there'd be another potential use case for this.  I
briefly toyed with trying to find someone to implement cert-based
authentication, but found I had other things more pressing (so the
TODO fell off the end of my list).

A

--
Andrew Sullivan  | ajs@crankycanuck.ca
I remember when computers were frustrating because they *did* exactly what
you told them to.  That actually seems sort of quaint now.
        --J.D. Baldwin

pgsql-admin by date:

Previous
From: Tom Lane
Date:
Subject: Re: OIDS problem
Next
From: "Sally Sally"
Date:
Subject: Unable to connect to a specific database