Обсуждение: connecting to postgresql using SSL without a certificate

Hello,

I wanted to ask if the sertificate at  ...\Application Data\postgresql 
directory is necessary to make a secure connection to the server? I was 
a bit surprised when after deleting the certificate and key files from 
...\Application Data\postgresql I was still capable of connecting to the 
server witch has hostssl entry for my computer address. The pgAdmin 
shows "Encryption SSL encripted " in server properties. What am I 
missing here?...

Client:
pgAdmin v 1.10.2 rev:8025
OS: WinXP + SP3

Server:
Postgresql 8.4.3
OS: Gentoo Linux

Thank you in advance.

-- 
Julius Tuskenis
Programavimo skyriaus vadovas
UAB nSoft
mob. +37068233050

On 15/06/2010 08:25, Julius Tuskenis wrote:
> Hello,
> 
> I wanted to ask if the sertificate at  ...\Application Data\postgresql
> directory is necessary to make a secure connection to the server? I was
> a bit surprised when after deleting the certificate and key files from
> ...\Application Data\postgresql I was still capable of connecting to the
> server witch has hostssl entry for my computer address. The pgAdmin
> shows "Encryption SSL encripted " in server properties. What am I
> missing here?...

I think the certificate you deleted is a client one, which the server
uses to identify you if it's configured to do so..... A "normal" SSL
connection, on the other hand, is where you (the client) request the
*server's* cert as part of the connection procedure.

I hope that make sense....

Ray.

-- 
Raymond O'Donnell :: Galway :: Ireland
rod@iol.ie

> I hope that make sense....
>    
Thank you, Raymond, it does.

-- 
Julius Tuskenis
Programavimo skyriaus vadovas
UAB nSoft
mob. +37068233050