| Lists: | pgsql-general |
|---|
| From: | "Knut P(dot) Lehre" <knutpl(at)broadpark(dot)no> |
|---|---|
| To: | pgsql-general(at)postgresql(dot)org |
| Subject: | Several simultaneous libpq connections from the same application to different servers using different SSL certs |
| Date: | 2009-02-25 13:29:36 |
| Message-ID: | fbf38130129f5.49a555d0@broadpark.no |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Lists: | pgsql-general |
When using a libpq-based clientlib with SSL, libpq gets crt and key files from %APPDATA%\postgresql (on MS Windows) (from now on called "DIR"). I'd like to connect from the same app to two different pg servers using a different set of crt/key files. One way of doing that could have been to first connect to one server, then replace the files in DIR, and connect to the other server. However, that does not work. It seems the app still uses the info from the files which were in DIR during the first connection. 1) Is there a way to specify which DIR to use for a particular connection? 2) If not, will this be available in pg 8.4? 3) Is there a way to merge different crt/key file sets in the same DIR to allow libpq using different ones for different connections? 4) Other suggestions of how to solve my problem using pg 8.3?
| From: | Magnus Hagander <magnus(at)hagander(dot)net> |
|---|---|
| To: | "Knut P(dot) Lehre" <knutpl(at)broadpark(dot)no> |
| Cc: | pgsql-general(at)postgresql(dot)org |
| Subject: | Re: Several simultaneous libpq connections from the same application to different servers using different SSL certs |
| Date: | 2009-02-25 17:15:59 |
| Message-ID: | 49A57CCF.7040506@hagander.net |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Lists: | pgsql-general |
Knut P. Lehre wrote:
> When using a libpq-based clientlib with SSL, libpq gets crt and key
> files from %APPDATA%\postgresql (on MS Windows) (from now on called
> "DIR"). I'd like to connect from the same app to two different pg
> servers using a different set of crt/key files. One way of doing that
> could have been to first connect to one server, then replace the files
> in DIR, and connect to the other server. However, that does not work. It
> seems the app still uses the info from the files which were in DIR
> during the first connection. 1) Is there a way to specify which DIR to
> use for a particular connection? 2) If not, will this be available in pg
> 8.4? 3) Is there a way to merge different crt/key file sets in the same
> DIR to allow libpq using different ones for different connections? 4)
> Other suggestions of how to solve my problem using pg 8.3?
No, this is not possible with 8.3. You can use different keys, but not
different certificates.
8.4 will give you the ability to specify certificates on a
per-connection basis.
//Magnus