Re: Can I disable sslcert/sslkey in pg_service.conf?

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: George Woodring <george(dot)woodring(at)iglass(dot)net>, pgsql-general <pgsql-general(at)postgresql(dot)org>
Subject: Re: Can I disable sslcert/sslkey in pg_service.conf?
Date: 2018-06-15 04:02:02
Message-ID: 9112a21f-f45d-1e26-9d85-e50886c4366c@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 6/14/18 15:06, George Woodring wrote:
> If I put the blanks into pg_service.conf:
>
> [mydb]
> dbname=mydb
> host=host1
> sslmode=require
> sslcert=
> sslkey=
>
> It does not work.

I can believe that.

> [woodring(at)ibeam]$ PGSERVICE=mydb psql
> psql: SSL error: tlsv1 alert unknown ca
>
> I tried the opposite of moving the .postgresql directory to a different
> name and putting a hard coded certificate path in pg_service, but it
> looks to have its own sets of challenges.

I think that's probably the best way out, though.

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Bruno Wolff III 2018-06-15 04:04:24 Trying to understand odd trigger behavior
Previous Message Adrian Klaver 2018-06-15 02:55:05 Re: Question on Buckets and Batches in explain plan