Ygthkb

Should a new user just default to LinearModelFit (vs Fit)

Is it possible to rotate the Isolines on a Surface Using `MeshFunction`?

Does the US government have any planning in place to ensure there's no shortages of food, fuel, steel and other commodities?

How can I give a Ranger advantage on a check due to Favored Enemy without spoiling the story for the player?

Do we still track damage on indestructible creatures?

Why didn't Tom Riddle take the presence of Fawkes and the Sorting Hat as more of a threat?

Possible issue with my W4 and tax return

Equivalent of "illegal" for violating civil law

Is the percentage symbol a constant?

Plausible reason for gold-digging ant

Sensor logger for Raspberry Pi in a stratospheric probe

Why does alert(0.-5) print -5?

What does からか mean?

Prevent Nautilus / Nemo from creating .Trash-1000 folder in mounted devices

Why is it that Bernie Sanders is always called a "socialist"?

What is a good way to explain how a character can produce flames from their body?

Buying a "Used" Router

What does an unprocessed RAW file look like?

How to politely refuse in-office gym instructor for steroids and protein

Writing dialogues for characters whose first language is not English

The No-Straight Maze

How can I handle players killing my NPC outside of combat?

How can I deduce the power of a capacitor from its datasheet?

Rigorous justification for non-relativistic QM perturbation theory assumptions?

Postgres still connecting via SSL - despite invalid certificates

0

I'm playing around with SSL connections to a test postgres server and I'm finding I can still initiate an SSL connection despite invalid certificates. (The valid date has expired)

I have enforced SSL connections in the pg_hba.conf

## pg_hba.conf - SSL TESTING

hostssl         mike            mike            192.168.56.106/32       md5

SSL Certificate is expired:

$ openssl x509 -in server.crt -noout -dates

notBefore=Feb 22 18:29:39 2019 GMT

notAfter=Feb 23 18:29:39 2019 GMT

Still able to connect via SSL:

postgres:/db/postgresql/10/data>psql "sslmode=require host=192.168.56.105 dbname=mike user=mike"

Password: 

psql (10.7)

SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off)

Type "help" for help.

mike=> 

Why can I still connect?

I'm hoping for a situation where the connection is rejected because the certificate is invalid - am I missing something? Any help appreciated :)

postgresql ssl

share

asked 2 mins ago

Mike GaleMike Gale

1

New contributor

Mike Gale is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

0

I'm playing around with SSL connections to a test postgres server and I'm finding I can still initiate an SSL connection despite invalid certificates. (The valid date has expired)

I have enforced SSL connections in the pg_hba.conf

## pg_hba.conf - SSL TESTING

hostssl         mike            mike            192.168.56.106/32       md5

SSL Certificate is expired:

$ openssl x509 -in server.crt -noout -dates

notBefore=Feb 22 18:29:39 2019 GMT

notAfter=Feb 23 18:29:39 2019 GMT

Still able to connect via SSL:

postgres:/db/postgresql/10/data>psql "sslmode=require host=192.168.56.105 dbname=mike user=mike"

Password: 

psql (10.7)

SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off)

Type "help" for help.

mike=> 

Why can I still connect?

I'm hoping for a situation where the connection is rejected because the certificate is invalid - am I missing something? Any help appreciated :)

postgresql ssl

share

asked 2 mins ago

Mike GaleMike Gale

1

New contributor

Mike Gale is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

I'm playing around with SSL connections to a test postgres server and I'm finding I can still initiate an SSL connection despite invalid certificates. (The valid date has expired)

I have enforced SSL connections in the pg_hba.conf

## pg_hba.conf - SSL TESTING

hostssl         mike            mike            192.168.56.106/32       md5

SSL Certificate is expired:

$ openssl x509 -in server.crt -noout -dates

notBefore=Feb 22 18:29:39 2019 GMT

notAfter=Feb 23 18:29:39 2019 GMT

Still able to connect via SSL:

postgres:/db/postgresql/10/data>psql "sslmode=require host=192.168.56.105 dbname=mike user=mike"

Password: 

psql (10.7)

SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off)

Type "help" for help.

mike=> 

Why can I still connect?

I'm hoping for a situation where the connection is rejected because the certificate is invalid - am I missing something? Any help appreciated :)

postgresql ssl

share

asked 2 mins ago

Mike GaleMike Gale

1

New contributor

Mike Gale is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

## pg_hba.conf - SSL TESTING

hostssl         mike            mike            192.168.56.106/32       md5

$ openssl x509 -in server.crt -noout -dates

notBefore=Feb 22 18:29:39 2019 GMT

notAfter=Feb 23 18:29:39 2019 GMT

postgres:/db/postgresql/10/data>psql "sslmode=require host=192.168.56.105 dbname=mike user=mike"

Password: 

psql (10.7)

SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off)

Type "help" for help.

mike=> 

share

asked 2 mins ago

Mike GaleMike Gale

1

New contributor

Mike Gale is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share

asked 2 mins ago

Mike GaleMike Gale

1

New contributor

Mike Gale is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 mins ago

Mike GaleMike Gale

1

New contributor

Mike Gale is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 mins ago

Mike GaleMike Gale

1