Re: ssl

From: "pg" <pg(at)newhonest(dot)com>
To: "pg" <pg(at)newhonest(dot)com>, "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "Oliver Elphick" <olly(at)lfix(dot)co(dot)uk>, "Nigel J(dot) Andrews" <nandrews(at)investsystems(dot)co(dot)uk>, <pgsql-general(at)postgresql(dot)org>
Subject: Re: ssl
Date: 2003-03-24 04:09:07
Message-ID: 001501c2f1bb$1dcdcc40$2101a8c0@newhonest.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Sorry for making this trouble. I chmod postgres.postgres server.*, and the
server started normally. Thanks for help.

-Jason

----- Original Message -----
From: "pg" <pg(at)newhonest(dot)com>
To: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "Oliver Elphick" <olly(at)lfix(dot)co(dot)uk>; "Nigel J. Andrews"
<nandrews(at)investsystems(dot)co(dot)uk>; <pgsql-general(at)postgresql(dot)org>
Sent: Monday, March 24, 2003 11:26 AM
Subject: Re: [GENERAL] ssl

> Hi Tom,
>
> I've followed strictly as suggested by techdoc to create certs(server.crt,
> server.key, server.req). The only two factors I'm not sure are :
> 1. where should I put those certs. I've put them in /var/lib/pgsql/data,
> where postgresql.conf sitting.
> 2. what user rights should the certs be. The ones I have now are already
> anybody readable.
>
> After setting the above and ssl = on in postgresql.conf, I restart the
> server with /etc/init.d/postgresql restart, it failled with no logging in
> pgsql (which is logging all local0), or message.log (the system log).
>
> -Jason
>
> ----- Original Message -----
> From: "Tom Lane" <tgl(at)sss(dot)pgh(dot)pa(dot)us>
> To: "Jason" <pg(at)newhonest(dot)com>
> Cc: "Oliver Elphick" <olly(at)lfix(dot)co(dot)uk>; "Nigel J. Andrews"
> <nandrews(at)investsystems(dot)co(dot)uk>; <pgsql-general(at)postgresql(dot)org>
> Sent: Monday, March 24, 2003 1:47 AM
> Subject: Re: [GENERAL] ssl
>
>
> > "Jason" <pg(at)newhonest(dot)com> writes:
> > > So what have I done wrong??
> > > I turned ssl = on in postgresql.conf, and restart postgresql. It just
> > > failed.
> >
> > No error message? If so, look again (or more likely, look to see why
> > your start script is routing the postmaster's complaint to /dev/null).
> >
> > My private bet is that you haven't set up the key/certificate files
> > needed by SSL, but there's not much use in guessing about it. First
> > thing you need is to be able to say something more concrete than "it
> > just failed".
> >
> > regards, tom lane
> >
> >
> > ---------------------------(end of broadcast)---------------------------
> > TIP 1: subscribe and unsubscribe commands go to majordomo(at)postgresql(dot)org
> >
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please send an appropriate
> subscribe-nomail command to majordomo(at)postgresql(dot)org so that your
> message can get through to the mailing list cleanly
>

In response to

  • Re: ssl at 2003-03-24 03:26:44 from pg

Browse pgsql-general by date

  From Date Subject
Next Message Andrew Bartley 2003-03-24 04:09:46 Re: 4 billion + oids
Previous Message Tamir Halperin 2003-03-24 04:03:19 Re: FW: [NOVICE] From a real novice