using SSL client certs? - Mailing list pgsql-general

From OpenMacNews
Subject using SSL client certs?
Date
Msg-id 43CF44B4.8090305@gmail.com
Whole thread Raw
Responses Re: using SSL client certs?  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

hi all,

i've been successfully running pgsql812 on OSX 10.4.4 w/ SSL=ON.

i've all pg_hba.conf auths set to 'hostssl'.

only "server.key" & "server.crt" exist in my data dir; i.e. -- i'm using SSL for "communication
security but not authentication".

now, i'd like to use client certs for authentication.

step 1 is, of course, add root.crt to the DATA_DIR.  that's done.

what now? where/how do i add the client certs?  is there an appropriate docs reference? chapters
16.7/16.9 don't clarify at all ...

thx!

richard

- --

/"\
\ /  ASCII Ribbon Campaign
 X   against HTML email, vCards
/ \  & micro$oft attachments

[GPG] OpenMacNews at gmail dot com
fingerprint: 50C9 1C46 2F8F DE42 2EDB  D460 95F7 DDBD 3671 08C6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (Darwin)

iEYEAREDAAYFAkPPRLQACgkQlffdvTZxCMYaNACfQWf0xs3KZEzcbHLt4thCGTwM
WbsAoK+6o65P5H5/T7GFyS6hdZISLhcL
=ueAf
-----END PGP SIGNATURE-----


pgsql-general by date:

Previous
From: David Fetter
Date:
Subject: Re: [BUGS] Execution of stored procedures
Next
From: Tom Lane
Date:
Subject: Re: using SSL client certs?