From: | "Dot Yet" <dot(dot)yet(at)gmail(dot)com> |
---|---|
To: | "General PostgreSQL List" <pgsql-general(at)postgresql(dot)org> |
Subject: | SSL Connectivity on Solaris 10 x86 |
Date: | 2007-10-30 03:16:40 |
Message-ID: | 93bc4af40710292016t48dd7ae5yf4ef2601229ea7eb@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Hello Everyone,
I have configured SSL for my postgreSQL setup. The environment is
PostgreSQL 8.2.5 (64-bit) built using Sun tools with ssl flag
OpenSSL 0.9.8d 28 Sep 2006
OpenSolaris 5.11 snv_73
I have configured the server key and certificate file using openssl. The
connection between a remote client and the server works fine. I can see the
following message at the client side....
SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
The problem part now...
I am seeing this "Connection reset by peer" message in the
postmaster.logfile, but the connection between the client and server
does get established
and works fine too...
Secondly, How do i enable SSL authentication between client and server. I
think right now it's just communication at the SSL layer.
LOG: could not load root certificate file "root.crt": No such file or
directory
DETAIL: Will not verify client certificates.
LOG: database system was shut down at 2007-10-28 01:24:52 EDT
LOG: checkpoint record is at 0/61799D90
LOG: redo record is at 0/61799D90; undo record is at 0/0; shutdown TRUE
LOG: next transaction ID: 0/1183; next OID: 32774
LOG: next MultiXactId: 1; next MultiXactOffset: 0
LOG: database system is ready
LOG: could not receive data from client: Connection reset by peer
The document talks about creating root certificate file and signing the
client certificates with it, but somehow I am a bit confused about it.
Any help would be much appreciated.
Regards,
dotyet
From | Date | Subject | |
---|---|---|---|
Next Message | brian | 2007-10-30 03:17:08 | Re: postgresql in PHP |
Previous Message | Jorge Godoy | 2007-10-30 02:51:53 | Re: print command in sproc |