-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating

PostgreSQL 16 Administration Cookbook
By :

This recipe shows you how to set up your PostgreSQL system so that it requires clients to present a valid X.509 certificate before allowing them to connect.
This can be used as an additional security layer, using double authentication, where the client must both have a valid certificate to set up the SSL connection and know the database user’s password. It can also be used as the sole authentication method, where the PostgreSQL server will first verify the client connection, using the certificate presented by the client, and then retrieve the username from the same certificate.
Get, or generate, a root certificate and a client certificate to be used by the connecting client.
For testing purposes or to set up a single trusted user, you can use a self-signed certificate:
openssl genrsa 2048 > client.key
openssl req -new -x509 -key server.key -out client.crt
In the server...
Change the font size
Change margin width
Change background colour