using SSL client certs?

From: OpenMacNews <openmacnews(at)gmail(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: using SSL client certs?
Date: 2006-01-19 07:50:12
Message-ID: 43CF44B4.8090305@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

hi all,

i've been successfully running pgsql812 on OSX 10.4.4 w/ SSL=ON.

i've all pg_hba.conf auths set to 'hostssl'.

only "server.key" & "server.crt" exist in my data dir; i.e. -- i'm using SSL for "communication
security but not authentication".

now, i'd like to use client certs for authentication.

step 1 is, of course, add root.crt to the DATA_DIR. that's done.

what now? where/how do i add the client certs? is there an appropriate docs reference? chapters
16.7/16.9 don't clarify at all ...

thx!

richard

- --

/"\
\ / ASCII Ribbon Campaign
X against HTML email, vCards
/ \ & micro$oft attachments

[GPG] OpenMacNews at gmail dot com
fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (Darwin)

iEYEAREDAAYFAkPPRLQACgkQlffdvTZxCMYaNACfQWf0xs3KZEzcbHLt4thCGTwM
WbsAoK+6o65P5H5/T7GFyS6hdZISLhcL
=ueAf
-----END PGP SIGNATURE-----

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2006-01-19 08:01:10 Re: using SSL client certs?
Previous Message David Fetter 2006-01-19 07:40:58 Re: [BUGS] Execution of stored procedures