Skip to content

Commit 790d451

Browse files
Merge pull request #270822 from GennadNY/gennadyk-branch24
Update concepts-networking-ssl-tls.md
2 parents c6bccde + 1c80511 commit 790d451

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

articles/postgresql/flexible-server/concepts-networking-ssl-tls.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -123,6 +123,8 @@ System.setProperty("javax.net.ssl.trustStorePassword","password");
123123
```
124124
6. Replace the original root CA pem file with the combined root CA file and restart your application/client.
125125

126+
For more information on configuring client certificates with PostgreSQL JDBC driver see this [documentation](https://jdbc.postgresql.org/documentation/ssl/)
127+
126128
> [!NOTE]
127129
> Azure Database for PostgreSQL - Flexible server doesn't support [certificate based authentication](https://www.postgresql.org/docs/current/auth-cert.html) at this time.
128130
@@ -167,6 +169,17 @@ For Azure App services, connecting to Azure Database for PostgreSQL, we can have
167169

168170
If you're trying to connect to the Azure Database for PostgreSQL using applications hosted in Azure Kubernetes Services (AKS) and pinning certificates, it's similar to access from a dedicated customers host environment. Refer to the steps [here](../../aks/ingress-tls.md).
169171

172+
## Testing SSL\TLS Connectivity
173+
174+
Before trying to access your SSL enabled server from client application, make sure you can get to it via psql. You should see output like the following if you have established a SSL connection.
175+
176+
177+
*psql (14.5)*
178+
*SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off)*
179+
*Type "help" for help.*
180+
181+
182+
170183
## Cipher Suites
171184

172185
A **cipher suite** is a set of cryptographic algorithms. TLS/SSL protocols use algorithms from a cipher suite to create keys and encrypt information.

0 commit comments

Comments
 (0)