Page 1 of 1

SSL and PKCS#12

Posted: Mon 16 Jul 2012 09:09
by petersen
hi

we want to use ssl-client authentication an therefore we're looking for an acceptable way to distribute the client-key with our software.

one approach we're testing is to use the pkcs#12 format - but there seems to be no property to assign the applied password (something like TPgConnection.SSLOptions.CertPassword ...)

maybe we have to use securebridge? does this work?

thanks!

Re: SSL and PKCS#12

Posted: Thu 19 Jul 2012 12:28
by Dimon
PgDAC supports the SSL protocol in two ways - with using SecureBridge components and with using the OpenSSL library.

If you use the OpenSSL library, then you should set the path to the key and certificate files in the OpenSSL format. For this, you should convert your key from the pkcs#12 format using the OpenSSL tools. You can find more information about this in the OpenSSL documentation.

If you use SecureBridge, you should import your key to TScStorage using the TScKey.ImportFrom method with specifying a correct password. You can find more detailed information about this method in the SecureBridge help.

Re: SSL and PKCS#12

Posted: Mon 23 Jul 2012 11:55
by petersen
we solved this by using securebridge - thanks for your answer!