Page 1 of 1

SSLMode smVerifyCA and OpenSSL

Posted: Mon 10 Feb 2020 15:29
by mariot
Hi,

We tested connection to PostgreSQL with SSLMode = smVerifyCA, but stopped us error message "The SSLModel = smVerifyCA is not supported when using OpenSSL". How can we connect to PostgreSQL with SSLMode = smVerifyCA, please?

We use OpenSSL libraries libcrypto-1_1.dll and libssl-1_1.dll. For example pgAdmin has Verify-CA SSLmode functional with that libraries.

Mario

Re: SSLMode smVerifyCA and OpenSSL

Posted: Fri 14 Feb 2020 13:54
by ViktorV
You can create an SSL connection to PostgreSQL server with the option smVerifyCA using the TCRSSLIOHandler component that combines UniDAC with SecureBridge. SecureBridge supports most modern protocols and algorithms.
You can test the required functionality with SecureBridge Trial Edition, a full-featured time-limited version of SecureBridge Professional Edition.
The TCRSSLIOHandler component is located in the dcldacsbridgeXXX package. This package is included in the UniDAC demos. See the package installation instructions in the file "%UniDACDemos%\TechnologySpecific\SecureBridge\Readme.html", where %UniDACDemos% is the UniDAC Demo projects installation path on your computer.

Re: SSLMode smVerifyCA and OpenSSL

Posted: Mon 17 Feb 2020 11:03
by mariot
Thanks.

I thought it is a bug in UniDAC when smVerifyCA was introduced as a new in release version 7.5.13 and I could not use it in UniDAC class TUniConnection.

Is SecureBridge "full version" a part of UniDAC? Or we must buy it? We have UniDAC Professional Edition licence.

Mario

Re: SSLMode smVerifyCA and OpenSSL

Posted: Fri 21 Feb 2020 10:38
by ViktorV
No, SecureBridge (https://www.devart.com/sbridge) is a separate product.