Encryption of pdAdmin on OpenShift with TLS termination type reencrypt

From: <Boon-Hooi(dot)Choo(at)t-systems(dot)com>
To: <pgadmin-hackers(at)postgresql(dot)org>
Subject: Encryption of pdAdmin on OpenShift with TLS termination type reencrypt
Date: 2022-06-06 20:28:10
Message-ID: FR3P281MB0859B2423FF35F9C431058BE9FA29@FR3P281MB0859.DEUP281.PROD.OUTLOOK.COM
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgadmin-hackers

Hello everyone,

I am trying to encrypt the connection from client side to the pod of pgAdmin 4 (container) on OpenShift. I have included a certificate (server.cert) and a key (server.key), which are extracted from the PFX file from our certificate operator on OpenShift. I have succeeded to encrypt the connection with TLS termination type "edge", which is defined in YAML file for route for pgAdmin 4. With type "edge", we only encrypt until the HA-Proxy (Router of OpenShift).
However, when I tried to change the TLS termination type to "reencrypt", with destination CA certificate provided, I have received a TLS handshake problem. I have tried to research online, and I believed that it is because I am trying to do a SSL connection to a non-SSL pod of pgAdmin 4. Do you know how could we change the config file of pod (NGINX?) and add the line of "host 443 ssl" to the server? (P.S.: I use the image of pgAdmin from crunchydata registry in my deployment YAML file.)

Thank you so much for your attention, any help would be much appreciated!

Many thanks and best regards,

Boon Hooi Choo

Consultant Digital Integration
PU Digital Solutions/Products & Solutions

T-Systems International GmbH

Responses

Browse pgadmin-hackers by date

  From Date Subject
Next Message Khushboo Vashi 2022-06-07 04:59:56 Re: Encryption of pdAdmin on OpenShift with TLS termination type reencrypt
Previous Message Dave Page 2022-06-06 09:44:58 Re: [pgAdmin][RM7351]: Templates not displayed