Thread: use SSL TO AUTH

I'd like to open  my database to users that have dynamic IP's (from the
internet).  Is there a way to use SSL/TLS to have the user AUTH'z my the OS
openSUSE 10.3
--
John Fabiani

On Thursday 06 March 2008 02:37:23 am Fabio Serra wrote:
> > I'd like to open  my database to users that have dynamic IP's (from the
> > internet).  Is there a way to use SSL/TLS to have the user AUTH'z my the
>
> OS
>
> > openSUSE 10.3
>
> I'm trying the same thing, but without success.
> First, I don't understand if PostgreSQL in OpenSuse 10.3 was compiled with
> SSL support. Is there any command to know how was compiled PG ?
>
> I followed step by step the manual:
> http://www.postgresql.org/docs/8.3/interactive/ssl-tcp.html
> I changed to on the ssl option in postgresql.conf and I created a self
> signed certificate that i copied in /var/lib/pgsql/data/
> The problem is that Postgres doesn't start correctly and I can't find any
> log to understand why.
> If you succeed to enable ssl on OpenSuse, please let me know.
> Regards

So far I have the same questions you have.

--
John Fabiani

"Fabio Serra" <faserone@gmail.com> writes:
> First, I don't understand if PostgreSQL in OpenSuse 10.3 was compiled with
> SSL support. Is there any command to know how was compiled PG ?

Almost certainly it was, but pg_config would show you the configure options.

> I changed to on the ssl option in postgresql.conf and I created a self
> signed certificate that i copied in /var/lib/pgsql/data/
> The problem is that Postgres doesn't start correctly and I can't find any
> log to understand why.

You'd need to look at the start script to see where it's sending the
postmaster log to.  The postgresql.conf file might also influence that.
I don't know how OpenSuse's package sets up the logging, but surely
it's going somewhere.

            regards, tom lane