Re: pg_hba.conf and hostssl all all 999.999.999.0/24 cert and use of letsencrypt.org software

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Poul Kristensen <bcc5226(at)gmail(dot)com>
Cc: pgsql-admin <pgsql-admin(at)postgresql(dot)org>
Subject: Re: pg_hba.conf and hostssl all all 999.999.999.0/24 cert and use of letsencrypt.org software
Date: 2017-01-30 08:32:11
Message-ID: CABUevEx69F3oxqf8D8=DUgH_n+ULVjAcU96K0r4vALqnzM3S1Q@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Jan 25, 2017 14:47, "Poul Kristensen" <bcc5226(at)gmail(dot)com> wrote:

Hi!

Does anyone know if letsencrypt can be used to authenticate host(client) to
host (PostgreSQL)?
The goal is to let the client authenticate againts the certificate
registered
in an openLDAP and use letsencrypt.org software.
The PostgreSQL host is going to run the openLDAP too.

Have anyone tried this?

Letsencrypt does not issue client certificates, so it won't work.

/Magnus

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Slavcho Trnkovski 2017-01-30 14:24:23 Tablespace symlinks
Previous Message Gunnar "Nick" Bluth 2017-01-30 08:20:29 Re: pg_hba.conf and hostssl all all 999.999.999.0/24 cert and use of letsencrypt.org software