Re: SSL client configuration ... - Mailing list pgsql-admin

From Mitch Pirtle
Subject Re: SSL client configuration ...
Date
Msg-id 407F51CB.9020604@spacemonkeylabs.com
Whole thread Raw
In response to SSL client configuration ...  (GP <pagomen@csd.uoc.gr>)
List pgsql-admin
Hmm...

>
> - hostssl  all  dbuser      212.205.129.107     255.255.255.0  md5 in
> pg_hba.conf

Shouldn't that be a 255.255.255.255 netmask?

> - generated server.crt and server.key as recommended in
> Administrator's Guide

Not in the correct directory though.  You need to put them both in:

    /home/pagomen/PostGress/data

The netmask is being interpreted incorrectly as IPv6 (hence the non-IP
host message):

FATAL:  no pg_hba.conf entry for host "::ffff:212.205.129.107", user
"dbuser", database "template1", SSL off

Get your server.crt and server.key in the right directory, and fix the
netmask in pg_hba.conf, and it just might work...

-- Mitch

pgsql-admin by date:

Previous
From: "aris"
Date:
Subject: Ask database
Next
From: Edoardo Ceccarelli
Date:
Subject: slow seqscan