[pgpool-general: 8705] Re: Will pgpool use SSL encryption only when connected with a certain user?

Tatsuo Ishii ishii at sraoss.co.jp
Fri Mar 31 17:19:00 JST 2023


[Cc:ed to pgpool-general at pgpool.net]

> On the last question,  to  establish an SSL TCP with a client without
> asking the client to show its certificate,
> Is it correct to set it in ` pool_hba.conf` with these 4 lines?
> 
> hostssl    *
> *someuser 0.0.0.0/0 <http://0.0.0.0/0> md5*
> 
> 
> *ssl on*
> 
> 
> *ssl_key ...*
> 
> *ssl_cert ...
> 
> *

Without concrete settings it's hard to say but probably yes except
"md5". It's unrelated to SSL but notice that recent PostgreSQL does
not allow to use md5 auth.

Best reagards,
--
Tatsuo Ishii
SRA OSS LLC
English: http://www.sraoss.co.jp/index_en/
Japanese:http://www.sraoss.co.jp



More information about the pgpool-general mailing list