Vincent Veyron wrote:
>
> > On Debian/Ubuntu, the default behavior is to have SSL enabled out
> > of the box, including for TCP connections to localhost.
>
> It is in Ubuntu, but not in Debian.
No, I've seen it a number of times with Debian. pg_createcluster will enable
SSL in postgresql.conf if it finds usable certificates under /etc/ssl.
When it doesn't, it's because of an antiquated version of postgresql-common,
or lack of certificates, or non-standard permissions to them.
More generally, Ubuntu vs Debian is not relevant for Postgres packages, they
are essentially identical at comparable version levels.
Best regards,
--
Daniel
PostgreSQL-powered mail user agent and storage: http://www.manitou-mail.org