Re: PKI/SSL Client/Server Certificate Authentication

From: Andrew Sullivan <ajs(at)crankycanuck(dot)ca>
To: pgsql-admin(at)postgresql(dot)org
Subject: Re: PKI/SSL Client/Server Certificate Authentication
Date: 2006-01-13 21:15:29
Message-ID: 20060113211529.GC10098@phlogiston.dyndns.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Fri, Jan 13, 2006 at 12:19:38PM -0500, Brian A. Seklecki wrote:
> In short, it's a deterrent to hackers and a convenience to admins. But we

Not just that. Unless something big has changed when I wasn't
looking, the jdbc driver can't use the .pgpass mechanism yet; but it
_can_ use SSL, except that it doesn't have the ability to validate
via certs. So there'd be another potential use case for this. I
briefly toyed with trying to find someone to implement cert-based
authentication, but found I had other things more pressing (so the
TODO fell off the end of my list).

A

--
Andrew Sullivan | ajs(at)crankycanuck(dot)ca
I remember when computers were frustrating because they *did* exactly what
you told them to. That actually seems sort of quaint now.
--J.D. Baldwin

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Sally Sally 2006-01-13 22:20:07 Unable to connect to a specific database
Previous Message Tom Lane 2006-01-13 19:49:56 Re: OIDS problem