| From: | Jeff Janes <jeff(dot)janes(at)gmail(dot)com> |
|---|---|
| To: | Иванов Евгений Сергеевич <zhenja86(at)gmail(dot)com> |
| Cc: | pgadmin-support(at)lists(dot)postgresql(dot)org |
| Subject: | Re: pgadmin4 ssl HELP! |
| Date: | 2017-08-12 01:37:14 |
| Message-ID: | CAMkU=1xFf_ECfjaSeQR1AEPAGU-BPV7BHzM8Vyr++yi3ZbJ2BA@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgadmin-support |
On Fri, Aug 11, 2017 at 4:30 AM, Иванов Евгений Сергеевич <
zhenja86(at)gmail(dot)com> wrote:
> I can not solve the problem. I use pgadmin4 v 1.6 through the web
> (apache2). In the database connection settings in the SSL-mode
> parameter, select "Verify-FULL". When I try to connect, I get an
> error: "root certificate file" /var/lib/wwwrun/.postgresql/root.crt
> "does not exist. Either provide the file or change sslmode to disable
> server certificate verification."
>
> Problem: The path by which the application searches for the
> "/var/lib/wwwrun/.postgresql/root.crt" certificate is the same for all
> users of pgadmin4. That makes it impossible to use this application as
> a multi-user application when using SSL.
>
If multiple users are all using the same machine, then there is already one
person they all trust--the person who has root access to that machine. Why
wouldn't that person sign all the certs, or arrange for them to be signed?
Cheers,
Jeff
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Иванов Евгений Сергеевич | 2017-08-14 07:27:40 | Re: pgadmin4 ssl HELP! |
| Previous Message | Christoph Berg | 2017-08-11 18:23:48 | Re: 2 process postgres -D for one instance |