Thread: SSL

SSL

From
The BOFH
Date:
Just installed 7.1 (first time) and enabled SSL support.  Is there a way to
confirm that connections are being made via SSL?  The logfile shows a
connection, but doesn't specify whether SSL was used or not.

I used hostssl in the hba file.

Thanks,




Re: SSL

From
Ron Peterson
Date:
The BOFH wrote:
>
> Just installed 7.1 (first time) and enabled SSL support.  Is there a way to
> confirm that connections are being made via SSL?  The logfile shows a
> connection, but doesn't specify whether SSL was used or not.
>
> I used hostssl in the hba file.

You need to compile PostgreSQL with SSL support, and configure
pg_hba.conf appropriately.  The comments in the provided pg_hba.conf
indicate:

# ... Note that a "host"
# record will also allow SSL connections; write "hostssl" if you want to
# accept *only* SSL-secured connections from this host or hosts.

If you wanted to be really sure, you could do some packet sniffing...

--
Ron Peterson
Network & Systems Manager
Mount Holyoke College
GPG and other info at http://www.mtholyoke.edu/~rpeterso

Re: SSL

From
"Poul L. Christiansen"
Date:
Is it possible to use a SSL connection from the Windows ODBC driver to
PostgreSQL?

Or do I have to make a SSH link instead?

Poul L. Christiansen

Ron Peterson wrote:
>
> The BOFH wrote:
> >
> > Just installed 7.1 (first time) and enabled SSL support.  Is there a way to
> > confirm that connections are being made via SSL?  The logfile shows a
> > connection, but doesn't specify whether SSL was used or not.
> >
> > I used hostssl in the hba file.
>
> You need to compile PostgreSQL with SSL support, and configure
> pg_hba.conf appropriately.  The comments in the provided pg_hba.conf
> indicate:
>
> # ... Note that a "host"
> # record will also allow SSL connections; write "hostssl" if you want to
> # accept *only* SSL-secured connections from this host or hosts.
>
> If you wanted to be really sure, you could do some packet sniffing...
>
> --
> Ron Peterson
> Network & Systems Manager
> Mount Holyoke College
> GPG and other info at http://www.mtholyoke.edu/~rpeterso
>
> ---------------------------(end of broadcast)---------------------------
> TIP 4: Don't 'kill -9' the postmaster