SSLMode smVerifyCA and OpenSSL

[mariot]

Hi,

We tested connection to PostgreSQL with SSLMode = smVerifyCA, but stopped us error message "The SSLModel = smVerifyCA is not supported when using OpenSSL". How can we connect to PostgreSQL with SSLMode = smVerifyCA, please?

We use OpenSSL libraries libcrypto-1_1.dll and libssl-1_1.dll. For example pgAdmin has Verify-CA SSLmode functional with that libraries.

Mario

[ViktorV]

You can create an SSL connection to PostgreSQL server with the option smVerifyCA using the TCRSSLIOHandler component that combines UniDAC with SecureBridge. SecureBridge supports most modern protocols and algorithms.
You can test the required functionality with SecureBridge Trial Edition, a full-featured time-limited version of SecureBridge Professional Edition.
The TCRSSLIOHandler component is located in the dcldacsbridgeXXX package. This package is included in the UniDAC demos. See the package installation instructions in the file "%UniDACDemos%\TechnologySpecific\SecureBridge\Readme.html", where %UniDACDemos% is the UniDAC Demo projects installation path on your computer.

[mariot]

Thanks.

I thought it is a bug in UniDAC when smVerifyCA was introduced as a new in release version 7.5.13 and I could not use it in UniDAC class TUniConnection.

Is SecureBridge "full version" a part of UniDAC? Or we must buy it? We have UniDAC Professional Edition licence.

Mario

[ViktorV]

No, SecureBridge (https://www.devart.com/sbridge) is a separate product.