PostgreSQL：在 Windows Server 2019 上使用 SSL（配置/证书问题）

Question

I am configuring a Windows Server 2019, running PostgreSQL. There is another server running "Qlik Sense" with a PostgreSQL connection using SSL connecting to the Windows Server.

That does not work, since SSL is not configured correctly I assume. Without SSL it does work, the firewall is configured to accept the needed port/ip.

I have a valid SSL certificate (created by the company) as a .cer file. Additionally I converted it as a .pfx file, since I was not sure what I need.

I is installed in the "Trusted Root Certification Authority Store" as a local certificate.

Now I figured I need to configure the postgresql.conf and the pg_hba.conf. I enabled "ssl=on". In the pg_hba.conf I added:

"hostssl all 127.0.0.1/32 cert"

Now I stopped the postgresql service and tried to start it again. That doesn't work. If I remove the script changes, it works again. Well, I think if it doesn't even work to start the service locally, it won't work remotely ;-)

Does anybody know how to:

• configure the scripts for postgresql so it used the correct certificate in the windows server trust store? does that even work? Maybe I have to put the certificate somewhere and add the path to the config file?

• what certification method to use? "ca" or "fully"?

Answer 1

ok. it worked. i just needed to provide the .cert and .key in the postgresql.conf