Universal certificate for verify-full ssl connection
От | Asia |
---|---|
Тема | Universal certificate for verify-full ssl connection |
Дата | |
Msg-id | 35982898-62d8268a04f9e6d9ec143476a203dc96@pkn5.m5r2.onet обсуждение исходный текст |
Ответы |
Re: Universal certificate for verify-full ssl connection
|
Список | pgsql-general |
Hi, I am trying to generate self-signed certificate for full ssl authentication. I need to have universal version of this certificatefor development purposes (so any client can connect with any postgresql server with ssl on and verify-full flag). I am using IP while connecting, I mean host=<IP>. However verify-full connection works only in case "Common Name" in certificate contains only fully qualified IP address,when I try to set CN as * (asterisk) I receive error: server common name "*" does not match hostname "my_ip" According to the documentation here : http://www.postgresql.org/docs/current/static/libpq-ssl.html "If the connection is made using an IP address instead of a host name, the IP address will be matched (without doing anyDNS lookups). " Would you please advise what I am doing wrong? Or maybe there is other way to generate wildcard certificate ? Or maybe thisis a possible bug? Thanks in advance ! Joanna
В списке pgsql-general по дате отправления: