Search Postgresql Archives

Re: SSL Certificates in Windows 7 & Postgres 9.3

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Are there other methods/ practices commonly used for these operations? 
> Thank you in advance.

You've got some serious confusion between client/server and other things
going on here...Adrian addressed those.  It might help to think of the fact
that the clients and server are typically not on the same physical machine. 
They should NOT be sharing ANY configuration files between each other.  It
may be they happen to have identical copies of a given file but those copies
should be in different locations.  

Oh, And where did you get the idea that "search_path" had anything to do
with this?

You should probably look into using a pg_service.conf file on the client.

http://www.postgresql.org/docs/9.0/static/libpq-pgservice.html

On the server side of things: create virtual machines

Since the server only has a single identity there is no obvious need or
provision to have it provide alternative names to the SSL-related files that
it uses.  The client, though, can assume multiple identities and so while
there is a set of default file names there are ways to override those - via
environment variables or conninfo settings (which is where pg_service.conf
comes in).

If the servers and clients share a trusted signing chain some degree of
"sharing" can be achieved but the only thing being checked then is global
identity.  (in theory...) It is possible to setup distinct chains so that
development clients cannot connect to production servers using the same set
of credentials that they use to connect to development servers.

David J.




--
View this message in context: http://postgresql.nabble.com/SSL-Certificates-in-Windows-7-Postgres-9-3-tp5830749p5831208.html
Sent from the PostgreSQL - general mailing list archive at Nabble.com.


-- 
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux