Обсуждение: [OT?] How to generate a certificate?
Hi, I try to set up PG7.2.1 (compiled it myself) with openssl support. I configured it but trying to start I get the message "/opt/pgsql/bin/postmaster: failed to load server certificate (/var/lib/pgsql/server.crt): No such file or directory" Then I copied the one I found with apache but it stays similar "/opt/pgsql/bin/postmaster: failed to load server certificate (/var/lib/pgsql/server.crt): no start line" In fact, the file is completly empty so I am wondering how I could generate a suitable certificate. Thx Thiemo <fontfamily><param>Helvetica</param> -- Thiemo Kellner Tösstalstrasse 146 CH-8400 Winterthur </fontfamily>Hi, I try to set up PG7.2.1 (compiled it myself) with openssl support. I configured it but trying to start I get the message "/opt/pgsql/bin/postmaster: failed to load server certificate (/var/lib/pgsql/server.crt): No such file or directory" Then I copied the one I found with apache but it stays similar "/opt/pgsql/bin/postmaster: failed to load server certificate (/var/lib/pgsql/server.crt): no start line" In fact, the file is completly empty so I am wondering how I could generate a suitable certificate. Thx Thiemo -- Thiemo Kellner Tösstalstrasse 146 CH-8400 Winterthur
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It's likely that your certificate is in /etc/ssl/server.crt. Check the documentation for your local installation of OpenSSL. It's configuration is separate from PostgreSQL. Joshua b. Jore http://www.greentechnologist.org On Wed, 10 Apr 2002, thiemo wrote: > Hi, > > I try to set up PG7.2.1 (compiled it myself) with openssl support. I > configured it but trying to start I get the message > > "/opt/pgsql/bin/postmaster: failed to load server certificate > (/var/lib/pgsql/server.crt): No such file or directory" > > Then I copied the one I found with apache but it stays similar > > "/opt/pgsql/bin/postmaster: failed to load server certificate > (/var/lib/pgsql/server.crt): no start line" > > In fact, the file is completly empty so I am wondering how I could > generate a suitable certificate. > > Thx > > Thiemo > > -- > Thiemo Kellner > T�sstalstrasse 146 > CH-8400 Winterthur > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (OpenBSD) Comment: For info see http://www.gnupg.org iD8DBQE8tKoSfexLsowstzcRAupzAKCQkML2o85+RblVmLgfokKSbbi14ACgkLk3 GSyMevHxTnRYnkluYKz+HPU= =D41K -----END PGP SIGNATURE-----
Hi, The fast way: openssl genrsa -out server.key openssl req -new -key server.key -out server.crt You can find more detailed instructions and explanations of the above in the Apache-SSL-HOWTO, e.g. at http://www.tldp.org/HOWTO/SSL-RedHat-HOWTO-3.html Regards -- Helge Bahmann <bahmann@math.tu-freiberg.de> /| \__ The past: Smart users in front of dumb terminals /_|____\ _/\ | __) $ ./configure \\ \|__/__| checking whether build environment is sane... yes \\/___/ | checking for AIX... no (we already did this) |