Re: Certficates - Mailing list pgsql-general

From Martin Gainty
Subject Re: Certficates
Date
Msg-id BLAPR19MB4227FA78BACDCDCA1A6CDB3BAE440@BLAPR19MB4227.namprd19.prod.outlook.com
Whole thread Raw
In response to Certficates  (Shankar Bhaskaran <mailshankarb@gmail.com>)
Responses Re: Certficates
List pgsql-general
cant you use keytool ?
assume server certificate is called server.crt
assume truststore file is called server.truststore.jks

cd %JRE_HOME%/lib/security
keytool -import -alias %ALIAS% -file server.crt -keystore server.truststore.jks

m.

From: Shankar Bhaskaran <mailshankarb@gmail.com>
Sent: Monday, August 10, 2020 1:53 PM
To: pgsql-general@lists.postgresql.org <pgsql-general@lists.postgresql.org>
Subject: Certficates
 
Hi All,

This is a very basic question . i have to import the server.crt on the client side java trustore to connect using jdbc to postgres server secured by ssl.
But when i try psql from same machine , it shows the connection as encrypted . How does psql import the server certificate?

 psql "postgresql://$POSTGRES_HOST:$PG_PORT/postgres" -U postgres
psql (9.6.18)
SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off)
Type "help" for help.


Regards,
Shankar

pgsql-general by date:

Previous
From: Shankar Bhaskaran
Date:
Subject: Certficates
Next
From: "Peter J. Holzer"
Date:
Subject: Re: UUID or auto-increment