SSL

Started by The BOFHalmost 25 years ago3 messagesgeneral
Jump to latest
#1The BOFH
TheBOFH@nc.rr.com

Just installed 7.1 (first time) and enabled SSL support. Is there a way to
confirm that connections are being made via SSL? The logfile shows a
connection, but doesn't specify whether SSL was used or not.

I used hostssl in the hba file.

Thanks,

#2Ron Peterson
rpeterso@mtholyoke.edu
In reply to: The BOFH (#1)
Re: SSL

The BOFH wrote:

Just installed 7.1 (first time) and enabled SSL support. Is there a way to
confirm that connections are being made via SSL? The logfile shows a
connection, but doesn't specify whether SSL was used or not.

I used hostssl in the hba file.

You need to compile PostgreSQL with SSL support, and configure
pg_hba.conf appropriately. The comments in the provided pg_hba.conf
indicate:

# ... Note that a "host"
# record will also allow SSL connections; write "hostssl" if you want to
# accept *only* SSL-secured connections from this host or hosts.

If you wanted to be really sure, you could do some packet sniffing...

--
Ron Peterson
Network & Systems Manager
Mount Holyoke College
GPG and other info at http://www.mtholyoke.edu/~rpeterso

#3Poul L. Christiansen
poulc@cs.auc.dk
In reply to: The BOFH (#1)
Re: SSL

Is it possible to use a SSL connection from the Windows ODBC driver to
PostgreSQL?

Or do I have to make a SSH link instead?

Poul L. Christiansen

Ron Peterson wrote:

Show quoted text

The BOFH wrote:

Just installed 7.1 (first time) and enabled SSL support. Is there a way to
confirm that connections are being made via SSL? The logfile shows a
connection, but doesn't specify whether SSL was used or not.

I used hostssl in the hba file.

You need to compile PostgreSQL with SSL support, and configure
pg_hba.conf appropriately. The comments in the provided pg_hba.conf
indicate:

# ... Note that a "host"
# record will also allow SSL connections; write "hostssl" if you want to
# accept *only* SSL-secured connections from this host or hosts.

If you wanted to be really sure, you could do some packet sniffing...

--
Ron Peterson
Network & Systems Manager
Mount Holyoke College
GPG and other info at http://www.mtholyoke.edu/~rpeterso

---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster