Обсуждение: Configuring only SSL in postgres docker image

Поиск
Список
Период
Сортировка

Configuring only SSL in postgres docker image

От
Shankar Bhaskaran
Дата:
Hi ,

I am trying to enable ssl on postgres docker image . The postgres  image should only support SSL . I did configure the  command:" -c ssl=on -c ssl_key_file=/opt/postgresql/server.key -c ssl_cert_file=/opt/postgresql/server.crt"   in the docker compose file. 
I also added the following entry in the pg_hba.conf after commenting all other host entries 
"hostssl   all  all   all md5".

But I am able to make ssl as well as non ssl connections to the postgres image. 

My observation is the command only updates the postmaster.opts file and not the postgres.conf file . 

Could I get some help 

Regards,
Shankar

Re: Configuring only SSL in postgres docker image

От
Paul Förster
Дата:
Hi Shankar,

> On 03. Aug, 2020, at 22:01, Shankar Bhaskaran <mailshankarb@gmail.com> wrote:
> I am trying to enable ssl on postgres docker image . The postgres  image should only support SSL . I did configure
the command:" -c ssl=on -c ssl_key_file=/opt/postgresql/server.key -c ssl_cert_file=/opt/postgresql/server.crt"   in
thedocker compose file. 

I don't know anything about Docker at all, so I can't say anything here.

> I also added the following entry in the pg_hba.conf after commenting all other host entries
> "hostssl   all  all   all md5".

are there any "host" entries in the pg_hba.conf file? If so, comment them out so that only the "hostssl" entries are
enabled.

> But I am able to make ssl as well as non ssl connections to the postgres image.

see above.

> My observation is the command only updates the postmaster.opts file and not the postgres.conf file .
>
> Could I get some help

the postgresql.conf file should have ssl=on and of course the key & certificate file settings. Maybe you should put
themthere. 

Cheers,
Paul