.................................................................379 17.8.3. Creating a Self-Signed Certificate ...........................................................379 17.9. Secure TCP/IP Connections authentication................................................................................435 19.3.8. Certificate authentication .........................................................................436 19 ................................................................................576 30.17.1. Certificate verification............................................................................576 30

.................................................................403 17.8.3. Creating a Self-Signed Certificate ..................................................................403 17.9. Secure TCP/IP ..................................................................................462 19.3.8. Certificate authentication ............................................................................... ................................................................................612 30.17.1. Certificate verification..................................................................................

.................................................................418 17.8.3. Creating a Self-Signed Certificate ..................................................................418 17.9. Secure TCP/IP authentication..................................................................................483 19.3.9. Certificate authentication ............................................................................... ................................................................................647 31.17.1. Certificate verification..................................................................................

.................................................................435 17.9.3. Creating a Self-signed Certificate...................................................................435 xi 17.10. Secure Authentication.................................................................................504 19.3.10. Certificate Authentication.............................................................................505 check the server’s certificate. To do that, the server must be configured to accept only hostssl connections (Section 19.1) and have SSL server.key (key) and server.crt (certificate) files (Sec- tion 17

.................................................................391 17.8.3. Creating a Self-Signed Certificate ...........................................................391 17.9. Secure TCP/IP Connections authentication...........................................................................451 19.3.9. Certificate authentication .........................................................................452 19 ................................................................................607 31.17.1. Certificate verification............................................................................608 31

.................................................................458 17.9.3. Creating a Self-signed Certificate...................................................................458 17.10. Secure TCP/IP Authentication.................................................................................529 19.3.10. Certificate Authentication.............................................................................530 that clients check the server’s certificate. To do that, the server must be configured to accept only hostssl connections (Section 19.1) and have SSL key and certificate files (Section 17.9). The TCP client

.................................................................408 17.9.3. Creating a Self-signed Certificate............................................................408 17.10. Secure TCP/IP Connections Authentication..........................................................................475 19.3.10. Certificate Authentication......................................................................476 19.3.11 check the server’s certificate. To do that, the server must be configured to accept only hostssl connections (Section 19.1) and have SSL server.key (key) and server.crt (certificate) files (Section 17

.................................................................429 17.9.3. Creating a Self-signed Certificate............................................................429 17.10. Secure TCP/IP Connections Authentication..........................................................................497 19.3.10. Certificate Authentication......................................................................498 19.3.11 that clients check the server’s certificate. To do that, the server must be configured to accept only hostssl connections (Section 19.1) and have SSL key and certificate files (Section 17.9). The TCP client

Authentication.................................................................................595 19.3.9. Certificate Authentication...............................................................................596 that clients check the server’s certificate. To do that, the server must be configured to accept only hostssl connections (Section 19.1) and have SSL key and certificate files (Section 17.9). The TCP client client must con- nect using sslmode=verify-ca or verify-full and have the appropriate root certificate file installed (Section 31.18.1). 17.8. Encryption Options PostgreSQL offers encryption at several

................................................................366 17.8.1. Creating a Self-Signed Certificate ..................................................................367 17.9. Secure TCP/IP key (key) and server.crt (certificate) files (Section 17.8). The TCP client must connect using sslmode=’require’ (Section 30.1) and have a ~/.postgresql/root.crt SSL certificate (Section 30.16). 364 Chapter and server.key must exist in the server’s data directory. These files should contain the server certificate and private key, respectively. If the private key is protected with a passphrase, the server will