Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Peter Eisentraut
On 2020-09-03 14:01, Susan Joseph wrote: Unfortunately I am not allowed to use wireshark in my environment.  Good idea though The system view pg_stat_ssl, in combination with pg_stat_activity, will show you whether a connection is using SSL. -- Peter Eisentraut http://www.2ndQua

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Susan Joseph
Susan Joseph sandajos...@verizon.net -Original Message- From: Stephen Frost To: Susan Joseph Cc: pgsql-gene...@postgresql.org Sent: Thu, Sep 3, 2020 9:12 am Subject: Re: SSL between Primary and Seconday PostgreSQL DBs Greetings, * Susan Joseph (sandajos...@verizon.net) wrote

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Stephen Frost
Greetings, * Susan Joseph (sandajos...@verizon.net) wrote: > So I made the changes on the secondary to change the sslmode to verify-fullI > removed the clientcert=1 in pg_hba.conf and removed any connections other > than sslI removed the passfile info from recovery.confand now I am getting > th

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Susan Joseph
8E SHA-1 Fingerprint: 51B1A879EB5ADAFA23042A8E84165CF89438F29B Susan Joseph sandajos...@verizon.net -Original Message- From: Susan Joseph To: sfr...@snowman.net Cc: pgsql-gene...@postgresql.org Sent: Thu, Sep 3, 2020 8:55 am Subject: Re: SSL between Primary and Seconday PostgreSQL DBs T

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Stephen Frost
Greetings, We really prefer it if you don't top-post on these lists but instead reply in-line, as I did. * Susan Joseph (sandajos...@verizon.net) wrote: > This is great, thanks.  I have not heard of verify-full but I will try that > and let you know if I have issues. > So I will remove the passf

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Susan Joseph
e- From: Stephen Frost To: Susan Joseph Cc: pgsql-gene...@postgresql.org Sent: Thu, Sep 3, 2020 8:28 am Subject: Re: SSL between Primary and Seconday PostgreSQL DBs Greetings, * Susan Joseph (sandajos...@verizon.net) wrote: >    - primary_conninfo = 'user=rep_user passfile='&

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Stephen Frost
Greetings, * Susan Joseph (sandajos...@verizon.net) wrote: >- primary_conninfo = 'user=rep_user passfile=''/data/.pgpass'' > host= port=5432 sslmode=verify-ca sslcert=client.crt > sslkey=client.key sslcompression=0 target_session_attrs=any' You really should be using sslmode=verify-full, ot

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Susan Joseph
Subject: Re: SSL between Primary and Seconday PostgreSQL DBs First thougt: A general solution that you could use is wireshark. For example : Search for wireshark ssl traffic Susan Joseph schreef op September 3, 2020 10:54:36 AM UTC: OK, I understand I was just hoping someone could confirm that my

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Wim Bertels
t; >Susan Joseph >sandajos...@verizon.net > > >-Original Message- >From: Peter Eisentraut >To: Susan Joseph ; >pgsql-gene...@postgresql.org >Sent: Thu, Sep 3, 2020 1:01 am >Subject: Re: SSL between Primary and Seconday PostgreSQL DBs > >On 2020-08-27 12

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread o1bigtenor
On Thu, Sep 3, 2020 at 5:54 AM Susan Joseph wrote: > > OK, I understand I was just hoping someone could confirm that my settings are > correct. > I didn't come across an error so everything seems to be working I just can't > verify that SSL is working. > Are there any commands you can run to ver

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-03 Thread Susan Joseph
t; Sent: Mon, Aug 24, 2020 10:10 am > Subject: SSL between Primary and Seconday PostgreSQL DBs > > I have setup a Primary and Secondary PostgreSQL DBs.  They were setup up > with basic replication then I went back and modified them to use SSL.  I > am just not sure if I did it correctly.

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-09-02 Thread Peter Eisentraut
tween Primary and Seconday PostgreSQL DBs I have setup a Primary and Secondary PostgreSQL DBs.  They were setup up with basic replication then I went back and modified them to use SSL.  I am just not sure if I did it correctly.  Everything is working but I want to make sure I have the set

Re: SSL between Primary and Seconday PostgreSQL DBs

2020-08-27 Thread Susan Joseph
So has no one done this before? -Original Message- From: Susan Joseph To: pgsql-gene...@postgresql.org Sent: Mon, Aug 24, 2020 10:10 am Subject: SSL between Primary and Seconday PostgreSQL DBs I have setup a Primary and Secondary PostgreSQL DBs.  They were setup up with basic

SSL between Primary and Seconday PostgreSQL DBs

2020-08-24 Thread Susan Joseph
I have setup a Primary and Secondary PostgreSQL DBs.  They were setup up with basic replication then I went back and modified them to use SSL.  I am just not sure if I did it correctly.  Everything is working but I want to make sure I have the settings correctly.  I am using PostgreSQL 11.2.