Preparing for a certificate-based SSL connection

You can set up a certificate-based SSL connection for PostgreSQL with your certificates and keys from the PostgreSQL provider.

About this task

The Content Platform Engine supports certificate-based SSL connection with PostgreSQL database server for containerized deployments.

Procedure

To configure certificate-based SSL for PostgreSQL:

  1. On your PostgreSQL provider, enable SSL connection.
  2. On your PostgreSQL provider, generate a server Certificate Authority (CA) certificate.
  3. On your PostgreSQL provider, generate the client certificate and client private key.
  4. Download the server certificate, client certificate, and client private key:
    server-ca.pem
    client-cert.pem
    client-key.pem

What to do next

To configure certificate-based SSL connection for containerized deployments, see the topic Managing secrets to protect sensitive PostgreSQL SSL configuration data.