Re: PostgreSQL configurable SSL key checking

From: Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>
To: Simon de Hartog <simon(dot)postgresql(at)dehartog(dot)nl>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: PostgreSQL configurable SSL key checking
Date: 2005-09-05 19:27:01
Message-ID: 20050905192701.GA20677@surnet.cl
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, Sep 05, 2005 at 09:03:06PM +0200, Simon de Hartog wrote:

> I have added all the users these applications run as to a group called
> "ssl". Permissions on the private key are owned by root, group ssl,
> protection rw-r----- (640). When I tell PostgreSQL to use this key with
> certificate (by using symlinks from server.key and server.crt in the
> postgreSQL data dir) it tells me that owner and permissions are wrong.
>
> How can I use this certificate and key for PostgreSQL (without copying
> the key and changing owner and permissions etc, because then the whole
> idea of centrally coordinated certificates is gone)?

Did you try using a hardlink instead of a symlink?

--
Alvaro Herrera -- Valdivia, Chile Architect, www.EnterpriseDB.com
"Ninguna manada de bestias tiene una voz tan horrible como la humana" (Orual)

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2005-09-05 19:27:09 Re: 4D Geometry
Previous Message Tom Lane 2005-09-05 19:18:04 Re: PostgreSQL configurable SSL key checking