Benjamin Smith wrote:
> But I am stumped as to how to create a client certificate
> that's enforced!
>
> I tried the instructions found
> http://marc.info/?l=tomcat-user&m=106293430225790&w=2
>
> and used the "ca.pem" created there as the postgres root.crt
> and although the PG daemon no longer indicates that it
> couldn't find root.crt, it also doesn't require a client
> certificate installed to access with psql.
>
> Any pointers for somebody who is NOT an ssl guru? (like myself!)
What does pg_hba.conf look like?
What is the psql command line you use to connect to the database?
Yours,
Laurenz Albe