Re: [HACKERS] SSL and USER_CERT_FILE round 2

2008-05-15 Thread Andrew Dunstan
[EMAIL PROTECTED] wrote: I think if you're going to provide for these then you should also provide for the CA cert and CRL. Otherwise, it seems sensible. I thought about that, but the root and crl are for the server, and that makes sense that the keys would be in the server directo

Re: [HACKERS] SSL and USER_CERT_FILE round 2

2008-05-15 Thread pgsql
> > > [EMAIL PROTECTED] wrote: >> Adding "sslkey" and "sslcert" to the PQconnectdb connection string. >> >> After some discussion, I think it is more appropriate to add the >> key/cert >> file for SSL into the connect string. For example: >> >> PQconnectdb("host=foo dbname=bar sslmode=require >> ss

Re: [HACKERS] SSL and USER_CERT_FILE round 2

2008-05-15 Thread Andrew Dunstan
[EMAIL PROTECTED] wrote: Adding "sslkey" and "sslcert" to the PQconnectdb connection string. After some discussion, I think it is more appropriate to add the key/cert file for SSL into the connect string. For example: PQconnectdb("host=foo dbname=bar sslmode=require sslkey=/opt/myapp/share/ke