Re: [7.3] can't connect with SSL

valerian wrote:
> On Fri, Dec 06, 2002 at 12:44:13PM -0500, Bruce Momjian wrote:
> >
> > We did overhaul the SSL code for 7.3, and I was able to get it working
> > using OpenSSL 0.9.6e 30 Jul 2002.  Have you read the new SSL
> > documentation in 7.3?
>
> Ah, so I must be using an outdated openssl then.  I had read the INSTALL
> file before compiling v7.3, but it didn't mention anything beyond making
> sure you have a full openssl installation (with headers and all that).

We didn't know what OpenSSL releases it supported.

> I checked the new docs, but the SSL section doesn't say much beyond how
> to create certificates and setup your pg_hba.conf.  The SSH tunnel idea

Yep, that was all we have.

> works fine though.  Guess I'll run with that for now.  It's not as nice
> as having 'hostssl' as the only remote connection option (since it
> doesn't enforce encryption), but oh well.

I had hostssl working here on BSD/OS.  One issue we had was that he went
with TLS encryption, which he said was fairly new but is the best one to
use.  I got it working here so I figured it was OK.  It would be
interesting to know if a newer version fixes it for you.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073