Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-11 Thread David Fetter
On Sun, Oct 10, 2010 at 12:08:13AM -0700, Mike Christensen wrote: > While I do appreciate the vote of confidence, rest assured you will > never see a post from me that starts with "So I've been hacking the pg > code and..." Actually, we get *plenty* of those. Cheers, David. -- David Fetter http

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-10 Thread Scott Marlowe
Postgres cannot run as root. On Sun, Oct 10, 2010 at 9:40 AM, Rob Sargent wrote: > Does postgres run as root or as the postgres user. I suspect you want > postgres to own that file. > > Mike Christensen wrote: >> >> Hi, I'm trying to require SSL for Postgres connections from certain >> IPs..  Thi

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-10 Thread Rob Sargent
Does postgres run as root or as the postgres user. I suspect you want postgres to own that file. Mike Christensen wrote: Hi, I'm trying to require SSL for Postgres connections from certain IPs.. This is on Postgres 9.0. First, I've followed the directions at: http://www.postgresql.org/docs/9

AAi.}c\1Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-10 Thread issinyeung
coh乡w Mike Christensen 编写: >While I do appreciate the vote of confidence, rest assured you will >never see a post from me that starts with "So I've been hacking the pg >code and..." > >On Sat, Oct 9, 2010 at 11:54 PM, Scott Marlowe wrote: >> On Sat, Oct 9, 2010 at 10:04 PM, Darren Duncan >> wr

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-10 Thread Mike Christensen
While I do appreciate the vote of confidence, rest assured you will never see a post from me that starts with "So I've been hacking the pg code and..." On Sat, Oct 9, 2010 at 11:54 PM, Scott Marlowe wrote: > On Sat, Oct 9, 2010 at 10:04 PM, Darren Duncan > wrote: >> The owner of these new files

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-09 Thread Scott Marlowe
On Sat, Oct 9, 2010 at 10:04 PM, Darren Duncan wrote: > The owner of these new files needs to be the same as that of your Pg data > dir in general or postgresql.conf specifically, and that owner be the same > as the process that runs the Pg server.  Are you running Pg as root?  (In > any event, yo

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-09 Thread Mike Christensen
Yup, my bad.. I should have noticed all the other files were owned by postgres (and I assume that's what the process is running under).. I'm still a Unix newbie, but learning quickly.. Everything's working, and to my surprise pgAdmin connected using SSL on the first try.. No need to mess with an

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-09 Thread Darren Duncan
The owner of these new files needs to be the same as that of your Pg data dir in general or postgresql.conf specifically, and that owner be the same as the process that runs the Pg server. Are you running Pg as root? (In any event, you should have another user; running programs or servers as r

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-09 Thread Mike Christensen
Sweet! That fixed it.. Rock on.. Of course now let's see if I can connect from my Mac client :) On Sat, Oct 9, 2010 at 9:00 PM, Ben Carbery wrote: > The private keys needs to be readable by the same user the server runs > under. This is distribution-dependent and may not be 'root'. > In my cas

Re: [GENERAL] Postgres won't start after setting ssl=on

2010-10-09 Thread Ben Carbery
The private keys needs to be readable by the same user the server runs under. This is distribution-dependent and may not be 'root'. In my case I run Red Hat which uses the 'postgres' user, so: chown postgres.postgres /var/lib/pgsql/data/server.* On Sun, Oct 10, 2010 at 2:52 PM, Mike Christensen

[GENERAL] Postgres won't start after setting ssl=on

2010-10-09 Thread Mike Christensen
Hi, I'm trying to require SSL for Postgres connections from certain IPs.. This is on Postgres 9.0. First, I've followed the directions at: http://www.postgresql.org/docs/9.0/static/ssl-tcp.html I've created the files server.crt and server.key. I've also removed the passphrase from the key so P