Re: confirming security.

On 02/22/2013 07:50 AM, Maz Mohammadi wrote:
> Thx John,
>
> It got me a long way. I actually have a more complex installation (I
> think) that I originally thought on my test linux box. Looks like all
> the files that I modify are under /var/lib/post../coord.
>
> I added the line.. to pg_hba.conf
>
> hostssl all all 127.0.0.1/32 cert
>
> and after restarting the coordinator node, it errored because I had to
> modify postgresql.conf (ssl=off) . So I feel that the server is now
> running in SSL mode.
>
> But when I used psql…I’m getting this….
>
> ==============
>
> postgres-xc(at)adminuser-VirtualBox:~/coord$ psql -h localhost testdb
>
> psql (PGXC 1.0.0, based on PG 9.1.4)
>
> SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
>
> Type "help" for help.
>
> testdb=# select 2+2;
>
> ?column?
>
> ----------
>
> 4
>
> (1 row)
>
> testdb=# \q
>
> ==============
>
> It’s telling me it’s through an SSL connection, but I didn’t specify any
> keystore on my side for psql? Does it pick it up from somewhere?
>
> Any help is greatly appreciated J
>
> Postgresql isn’t half bad ;)
>

Is the above line from pg_hba.conf the only one in the file?

If not could you post the entire file contents?

Remember in pg_hba.conf first match wins.

--
Adrian Klaver
adrian(dot)klaver(at)gmail(dot)com