Re: PostgreSQL configurable SSL key checking

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>
Cc: Simon de Hartog <simon(dot)postgresql(at)dehartog(dot)nl>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: PostgreSQL configurable SSL key checking
Date: 2005-09-05 19:45:56
Message-ID: 3989.1125949556@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org> writes:
> On Mon, Sep 05, 2005 at 09:03:06PM +0200, Simon de Hartog wrote:
>> How can I use this certificate and key for PostgreSQL (without copying
>> the key and changing owner and permissions etc, because then the whole
>> idea of centrally coordinated certificates is gone)?

> Did you try using a hardlink instead of a symlink?

Won't help --- he's complaining about the stat() test on ownership and
permissions of the private key file (in be-secure.c). stat looks
through symlinks, so the answer will be the same.

regards, tom lane

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Chris Traylor 2005-09-05 20:31:06 Re: 4D Geometry
Previous Message Tom Lane 2005-09-05 19:38:27 Re: statement logging / extended query protocol issues