SSL connection between PHP4 & PostgreSQL ???

[Mike Morris]

Hi,

I've setup a postgres server (7.4) and confirmed that SSL is enabled - I can successfully
connect via tcp socket over SSL using the psql client.

From PHP4, how can I get the pg_connect function to negotiate an SSL connection?

I gather from researching the issue that pg_connect uses the same libraries as psql, so that
this should be possible. But I've tried every syntax I can think of... the "options" parameter to
pg_connect is not well documented.

I've played with all varieties of "requiressl" or "ssl", alone or as a boolean, e.g.,
"requiressl=true", etc...

If not possible in PHP4, is it in PHP5?

Any help greatly appreciated!

MikeM
Mike Morris
The Music Place
1617 Willowhurst Avenue
San Jose, CA 95125
(408) 445-ARTS (2787)
------------------------------------
Your Free Historical Quote:
Above all, I know there is a Supreme Being who rules the affairs of men and
whose goodness and mercy have always followed the American people, and I know
He will not turn from us now if we humbly and reverently seek His powerful aid.
- Grover Cleveland, Second Inaugural Address, March 4, 1893
------------------------------------
---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?

http://www.postgresql.org/docs/faqs/FAQ.html

[Mike Nolan]

> >From PHP4, how can I get the pg_connect function to negotiate an SSL connection?

I gather from researching the issue that pg_connect uses the same libraries as psql, so that
this should be possible. But I've tried every syntax I can think of... the "options" parameter to
pg_connect is not well documented.

I've played with all varieties of "requiressl" or "ssl", alone or as a boolean, e.g.,
"requiressl=true", etc...

First, are you sure that SSL is linked into PHP? Use phpinfo() if you're
not sure.

Second, what are you using for a connect statement?

Here's a sanitized version of one that works for me:

DB::connect("pgsql://foobar:mypassword@tcp+99.99.99.99/dbnm?requiressl=true");
--
Mike Nolan
---------------------------(end of broadcast)---------------------------
TIP 9: the planner will ignore your desire to choose an index scan if your
joining column's datatypes do not match

[Joshua D. Drake]

Mike Morris wrote:

Hi,

I've setup a postgres server (7.4) and confirmed that SSL is enabled - I can successfully
connect via tcp socket over SSL using the psql client.

From PHP4, how can I get the pg_connect function to negotiate an SSL connection?

Hello,
Have not done this in a while but I believe you have to compile PHP with
openssl support.

Sincerely,

Joshua D. Drake

I gather from researching the issue that pg_connect uses the same libraries as psql, so that
this should be possible. But I've tried every syntax I can think of... the "options" parameter to
pg_connect is not well documented.

I've played with all varieties of "requiressl" or "ssl", alone or as a boolean, e.g.,
"requiressl=true", etc...

If not possible in PHP4, is it in PHP5?

Any help greatly appreciated!

MikeM
Mike Morris
The Music Place
1617 Willowhurst Avenue
San Jose, CA 95125
(408) 445-ARTS (2787)
------------------------------------
Your Free Historical Quote:
Above all, I know there is a Supreme Being who rules the affairs of men and
whose goodness and mercy have always followed the American people, and I know
He will not turn from us now if we humbly and reverently seek His powerful aid.
- Grover Cleveland, Second Inaugural Address, March 4, 1893
------------------------------------
---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?

http://www.postgresql.org/docs/faqs/FAQ.html

--
Command Prompt, Inc., home of Mammoth PostgreSQL - S/ODBC and S/JDBC
Postgresql support, programming shared hosting and dedicated hosting.
[phone] - [e-mail] - http://www.commandprompt.com
Mammoth PostgreSQL Replicator. Integrated Replication for PostgreSQL
---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to ma*******@postgresql.org)