Re: ssl connections to postgresql

From: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
To: "James B(dot) Byrne" <byrnejb(at)harte-lyne(dot)ca>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: ssl connections to postgresql
Date: 2007-07-24 22:29:51
Message-ID: 46A67D5F.6070001@commandprompt.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

James B. Byrne wrote:
> PostgreSQL 8.1.9
> CentOS 4.5
>
> I have setup postgresql to use ssl and have configured and restarted the
> service without error. I am connecting a web app from a remote httpd host
> and I would like to verify that the connection between these two machines
> is indeed employing ssl for the application in question.

just enforce hostssl in your pg_hba.conf and nothing else. If you can
connect, you are good :)

Joshua D. Drake

>
> I can connect from the httpd host to the postgresql host using psql and it
> shows that an ssl connection with a 256 bit key is in use. However, I
> would like to verify that the web app is also using ssl and I cannot seem
> to find any logging setting or other mechanism that will explicitly state
> that the connection made by this application is using ssl.
>
> Is there some confidence check that I can invoke via a log setting or
> something else to have the postgresql server state with certainty that the
> connection between the app host and the db host is via ssl?
>
> I subscribe to the digest version so the favour of a direct reply in
> addition to any sent to this list is requested
>
>
> Regards,
>

--

=== The PostgreSQL Company: Command Prompt, Inc. ===
Sales/Support: +1.503.667.4564 || 24x7/Emergency: +1.800.492.2240
Providing the most comprehensive PostgreSQL solutions since 1997
http://www.commandprompt.com/

Donate to the PostgreSQL Project: http://www.postgresql.org/about/donate
PostgreSQL Replication: http://www.commandprompt.com/products/

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message cluster 2007-07-24 22:33:15 Functions refering directly to table columns?
Previous Message Tom Lane 2007-07-24 21:49:04 Re: invalid memory alloc request size 2147483648 using toode LIKE 'ä%'