harpagornis wrote > I changed the CN in all the certificates from 127.0.0.1 "my_role", which > is the user id. Now the pg_log contains this: > --------------------------------------------------------------------------------------- > 2014-12-15 22:28:04 GMT LOG: database system was shut down at 2014-12-15 > 22:28:01 GMT > 2014-12-15 22:28:04 GMT LOG: database system is ready to accept > connections > 2014-12-15 22:28:04 GMT LOG: autovacuum launcher started > 2014-12-15 22:28:05 GMT FATAL: the database system is starting up > 2014-12-15 22:28:06 GMT FATAL: connection requires a valid client > certificate > 2014-12-15 22:28:06 GMT FATAL: no pg_hba.conf entry for host "127.0.0.1", > user "SYSTEM", database "postgres", SSL off The first question I'd ask is who this "SYSTEM" user is. I don't recall that any PostgreSQL code identifies itself as "SYSTEM" but given how quickly it attempts to connect I may simply be mistaken. Regardless, you either need to get "SYSTEM" to use an SSL client certificate or create an pg_hba.conf entry that will allow it to connect without one. David J. -- View this message in context: http://postgresql.nabble.com/SSL-Certificates-in-Windows-7-Postgres-9-3-tp5830749p5830784.html Sent from the PostgreSQL - general mailing list archive at Nabble.com. -- Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-general