Re: SSL certificate location - Mailing list pgsql-hackers

From Christoph Moench-Tegeder
Subject Re: SSL certificate location
Date
Msg-id 20160417213202.GA59436@elch.exwg.net
Whole thread Raw
In response to SSL certificate location  (Terence Ferraro <terencejferraro@gmail.com>)
List pgsql-hackers
## Terence Ferraro (terencejferraro@gmail.com):

> At the moment, if a user has multiple applications on a single machine
> connecting with different SSL certificates, each process must be launched
> by a different logical user and the certificates placed within that user's
> home directory (and this is just for *nix, forget about Windows). The
> current method is not scalable, either.

That is incorrect.
http://www.postgresql.org/docs/current/static/libpq-ssl.html
http://www.postgresql.org/docs/current/static/libpq-connect.html#LIBPQ-PARAMKEYWORDS
http://www.postgresql.org/docs/current/static/libpq-envars.html

Connection parameters are "sslcert" and "sslkey", environment variables
"PGSSLCERT" and "PGSSLKEY".
You can also specify parameters in your .pg_service.conf.

Regards,
Christoph

-- 
Spare Space



pgsql-hackers by date:

Previous
From: Terence Ferraro
Date:
Subject: SSL certificate location
Next
From: Tom Lane
Date:
Subject: Re: snapshot too old, configured by time