Re: Can I disable sslcert/sslkey in pg_service.conf? - Mailing list pgsql-general

From Peter Eisentraut
Subject Re: Can I disable sslcert/sslkey in pg_service.conf?
Date
Msg-id 9112a21f-f45d-1e26-9d85-e50886c4366c@2ndquadrant.com
Whole thread Raw
In response to Can I disable sslcert/sslkey in pg_service.conf?  (George Woodring <george.woodring@iglass.net>)
List pgsql-general
On 6/14/18 15:06, George Woodring wrote:
> If I put the blanks into pg_service.conf:
> 
> [mydb]
> dbname=mydb
> host=host1
> sslmode=require
> sslcert=
> sslkey=
> 
> It does not work.

I can believe that.

> [woodring@ibeam]$ PGSERVICE=mydb psql
> psql: SSL error: tlsv1 alert unknown ca
> 
> I tried the opposite of moving the .postgresql directory to a different
> name and putting a hard coded certificate path in pg_service, but it
> looks to have its own sets of challenges.

I think that's probably the best way out, though.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services


pgsql-general by date:

Previous
From: Adrian Klaver
Date:
Subject: Re: Question on Buckets and Batches in explain plan
Next
From: Bruno Wolff III
Date:
Subject: Trying to understand odd trigger behavior