Re: [GENERAL] ssl connections to postgresql

2007-07-27 Thread Albe Laurenz
James B. Byrne wrote: On Tue, July 24, 2007 18:29, Joshua D. Drake wrote: just enforce hostssl in your pg_hba.conf and nothing else. If you can connect, you are good :) Thanks, I will probably end up doing this. What I am really looking for is an audit trail for all DBM host connections

Re: [GENERAL] ssl connections to postgresql

2007-07-27 Thread James B. Byrne
On Fri, July 27, 2007 04:20, Albe Laurenz wrote: This is more a philosophical question. If you only allow hostssl connections in pg_hba.conf AND forbid all host connections (with one last 'reject' line), PostgreSQL will reject all connections that are not via SSL. If your security

Re: [GENERAL] ssl connections to postgresql

2007-07-27 Thread Lincoln Yeoh
At 09:26 PM 7/26/2007, James B. Byrne wrote: Is there a way to use a key larger than 256 bits and is there any reason why this would not be useful in practice? Our standard key sizes here seem to by either 1024 or 2048. Hi, There's a difference between a symmetric key, and a public key. 256

Re: [GENERAL] ssl connections to postgresql

2007-07-27 Thread Lincoln Yeoh
At 05:13 AM 7/25/2007, James B. Byrne wrote: I can connect from the httpd host to the postgresql host using psql and it shows that an ssl connection with a 256 bit key is in use. However, I would like to verify that the web app is also using ssl and I cannot seem to find any logging setting or

Re: [GENERAL] ssl connections to postgresql

2007-07-26 Thread James B. Byrne
On Tue, July 24, 2007 18:29, Joshua D. Drake wrote: just enforce hostssl in your pg_hba.conf and nothing else. If you can connect, you are good :) Joshua D. Drake Thanks, I will probably end up doing this. What I am really looking for is an audit trail for all DBM host connections to show

Re: [GENERAL] ssl connections to postgresql

2007-07-26 Thread Richard Huxton
James B. Byrne wrote: On Wed, July 25, 2007 03:13, Albe Laurenz wrote: James B. Byrne wrote: I would like to verify that the connection between these two machines is indeed employing ssl for the application in question. If you set log_min_messages and log_min_error_statement to debug5, you

Re: [GENERAL] ssl connections to postgresql

2007-07-26 Thread James B. Byrne
On Wed, July 25, 2007 03:13, Albe Laurenz wrote: James B. Byrne wrote: I would like to verify that the connection between these two machines is indeed employing ssl for the application in question. If you set log_min_messages and log_min_error_statement to debug5, you will get something

Re: [GENERAL] ssl connections to postgresql

2007-07-25 Thread Albe Laurenz
James B. Byrne wrote: I have setup postgresql to use ssl and have configured and restarted the service without error. I am connecting a web app from a remote httpd host and I would like to verify that the connection between these two machines is indeed employing ssl for the application in

Re: [GENERAL] ssl connections to postgresql

2007-07-24 Thread Joshua D. Drake
James B. Byrne wrote: PostgreSQL 8.1.9 CentOS 4.5 I have setup postgresql to use ssl and have configured and restarted the service without error. I am connecting a web app from a remote httpd host and I would like to verify that the connection between these two machines is indeed employing ssl