Benjamin Smith wrote: > But I am stumped as to how to create a client certificate > that's enforced! > > I tried the instructions found > http://marc.info/?l=tomcat-user&m=106293430225790&w=2 > > and used the "ca.pem" created there as the postgres root.crt > and although the PG daemon no longer indicates that it > couldn't find root.crt, it also doesn't require a client > certificate installed to access with psql. > > Any pointers for somebody who is NOT an ssl guru? (like myself!) What does pg_hba.conf look like? What is the psql command line you use to connect to the database? Yours, Laurenz Albe ---------------------------(end of broadcast)--------------------------- TIP 6: explain analyze is your friend