SSL and PKCS#12

[petersen]

hi

we want to use ssl-client authentication an therefore we're looking for an acceptable way to distribute the client-key with our software.

one approach we're testing is to use the pkcs#12 format - but there seems to be no property to assign the applied password (something like TPgConnection.SSLOptions.CertPassword ...)

maybe we have to use securebridge? does this work?

thanks!

[Dimon]

PgDAC supports the SSL protocol in two ways - with using SecureBridge components and with using the OpenSSL library.

If you use the OpenSSL library, then you should set the path to the key and certificate files in the OpenSSL format. For this, you should convert your key from the pkcs#12 format using the OpenSSL tools. You can find more information about this in the OpenSSL documentation.

If you use SecureBridge, you should import your key to TScStorage using the TScKey.ImportFrom method with specifying a correct password. You can find more detailed information about this method in the SecureBridge help.

[petersen]

we solved this by using securebridge - thanks for your answer!