[Ach] postgresql diff

Berg San bs at cyontris.eu
Mon Nov 25 21:30:29 CET 2013


Hi,

I've wrote the postgresql section.
Please check.

Thx!

Cheers
Berg
-------------- next part --------------
diff --git a/src/DBs.tex b/src/DBs.tex
index 4e3caeb..524b43f 100644
--- a/src/DBs.tex
+++ b/src/DBs.tex
@@ -36,7 +36,30 @@ show variables like '%ssl%';
 \todo{write this}
 
 \subsubsection{Postgresql}
-\todo{write this}
 
+It's recommended to read 
+
+http://www.postgresql.org/docs/X.X/interactive/runtime-config-connection.html\#RUNTIME-CONFIG-CONNECTION-SECURITY
+
+Just change X.X with your preferred version e.g. 9.1
+
+To start in SSL mode the server.crt and server.key must exist in the server's data directory \$PGDATA. 
+Don't forget to set the right permission (0600) to your server.key. 
+
+Starting with version 9.2, you have the possibility to set the path.
+
+\begin{lstlisting}[breaklines]
+ssl_key_file = '/your/path/server.key'
+ssl_cert_file = '/your/path/server.crt'
+ssl_ca_file = '/your/path/root.crt'
+\end{lstlisting}
+
+\paragraph*{postgresql.conf}\mbox{}\\
+
+\begin{lstlisting}[breaklines]
+#>=8.3
+ssl = on 
+ssl_ciphers = 'EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EDH+CAMELLIA256:EECDH:EDH+aRSA:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED:!AES128:!CAMELLIA128:!ECDSA:AES256-SHA'
+\end{lstlisting}
 \subsubsection{Informix}
 \todo{write this}


More information about the Ach mailing list