Encryption of pdAdmin on OpenShift with TLS termination type reencrypt - Mailing list pgadmin-hackers

From
Subject Encryption of pdAdmin on OpenShift with TLS termination type reencrypt
Date
Msg-id FR3P281MB0859B2423FF35F9C431058BE9FA29@FR3P281MB0859.DEUP281.PROD.OUTLOOK.COM
Whole thread Raw
Responses Re: Encryption of pdAdmin on OpenShift with TLS termination type reencrypt  (Khushboo Vashi <khushboo.vashi@enterprisedb.com>)
List pgadmin-hackers

Hello everyone,

 

I am trying to encrypt the connection from client side to the pod of pgAdmin 4 (container) on OpenShift. I have included a certificate (server.cert) and a key (server.key), which are extracted from the PFX file from our certificate operator on OpenShift. I have succeeded to encrypt the connection with TLS termination type “edge”, which is defined in YAML file for route for pgAdmin 4. With type “edge”, we only encrypt until the HA-Proxy (Router of OpenShift).

However, when I tried to change the TLS termination type to “reencrypt”, with destination CA certificate provided, I have received a TLS handshake problem. I have tried to research online, and I believed that it is because I am trying to do a SSL connection to a non-SSL pod of pgAdmin 4. Do you know how could we change the config file of pod (NGINX?) and add the line of “host 443 ssl” to the server? (P.S.: I use the image of pgAdmin from crunchydata registry in my deployment YAML file.)

 

Thank you so much for your attention, any help would be much appreciated!

 

 

 

Many thanks and best regards,

 

Boon Hooi Choo

 

Consultant Digital Integration

PU Digital Solutions/Products & Solutions

 

T-Systems International GmbH

pgadmin-hackers by date:

Previous
From: Dave Page
Date:
Subject: Re: [pgAdmin][RM7351]: Templates not displayed
Next
From: Khushboo Vashi
Date:
Subject: Re: Encryption of pdAdmin on OpenShift with TLS termination type reencrypt