Re: SSL - Mailing list pgsql-general

From Ron Peterson
Subject Re: SSL
Date
Msg-id 3ADDF020.9EDC635E@mtholyoke.edu
Whole thread Raw
In response to SSL  (The BOFH <TheBOFH@nc.rr.com>)
List pgsql-general
The BOFH wrote:
>
> Just installed 7.1 (first time) and enabled SSL support.  Is there a way to
> confirm that connections are being made via SSL?  The logfile shows a
> connection, but doesn't specify whether SSL was used or not.
>
> I used hostssl in the hba file.

You need to compile PostgreSQL with SSL support, and configure
pg_hba.conf appropriately.  The comments in the provided pg_hba.conf
indicate:

# ... Note that a "host"
# record will also allow SSL connections; write "hostssl" if you want to
# accept *only* SSL-secured connections from this host or hosts.

If you wanted to be really sure, you could do some packet sniffing...

--
Ron Peterson
Network & Systems Manager
Mount Holyoke College
GPG and other info at http://www.mtholyoke.edu/~rpeterso

pgsql-general by date:

Previous
From: will trillich
Date:
Subject: Re: corrupted database?
Next
From: The BOFH
Date:
Subject: Question Two: DB access