Skip to content

Commit e35d618

Browse files
committed
Tweaking Postgres SSL README.md notes
1 parent 6592c43 commit e35d618

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

README.md

+8-2
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,7 @@ The current workaround is to move the project directory onto a different partiti
120120

121121
The default database for testing etc is H2. PostgreSQL is used for the sandboxes (user accounts, metadata, transaction cache).
122122

123-
### Minimal notes on using Postgres with SSL (work in progress):
123+
### Notes on using Postgres with SSL:
124124

125125
Postgres needs to be compiled with SSL support.
126126

@@ -131,7 +131,9 @@ For the steps, see: https://www.howtoforge.com/postgresql-ssl-certificates
131131
In short, edit postgresql.conf
132132

133133
ssl = on
134+
134135
ssl_cert_file = '/etc/YOUR-DIR/server.crt'
136+
135137
ssl_key_file = '/etc/YOUR-DIR/server.key'
136138

137139
And restart postgres.
@@ -140,7 +142,9 @@ Now, this should enable SSL (on the same port that Postgres normally listens on)
140142
To force SSL, edit pg_hba.conf replacing the host entries with hostssl
141143

142144
Now in OBP-API Props, edit your db.url and add &ssl=true
145+
143146
e.g.
147+
144148
db.url=jdbc:postgresql://localhost:5432/my_obp_database?user=my_obp_user&password=the_password&ssl=true
145149

146150
Note: Your Java environment may need to be setup correctly to use SSL
@@ -152,7 +156,9 @@ Note you can change the log level in /src/main/resources/default.logback.xml (tr
152156
There is a gist / tool which is useful for this. Search the web for SSLPoke. Note this is an external repository.
153157

154158
e.g. https://gist.github.com/4ndrej/4547029
159+
155160
or
161+
156162
git clone https://github.com/MichalHecko/SSLPoke.git .
157163

158164
gradle jar
@@ -174,7 +180,7 @@ keytool -import -storepass changeit -noprompt -alias localhost_postgres_cert -ke
174180
To get certificate from the server / get further debug information:
175181
openssl s_client -connect ip:port
176182

177-
- The above section is work in progress. -
183+
The above section is work in progress.
178184

179185

180186

0 commit comments

Comments
 (0)