Secure communication with PostgreSQL

[denlun44]

I am aware that PostgreSQL support is a new (and very welcome) addition to VBR but I am concerned over the total lack of secure communication options.
The documentation on implementing SSL for PostgreSQL does show that it is non-trivial but even if you manage to jump through all the hoops on the server side I can't see how you would configure the secure connection in Veeam, so I am assuming that it is not supported at the moment.
Am I correct in my assumption and is support for SSL in the works?

[Mildur]

Hi Dennis

PostgreSQL SSL/TLS is currently not supported. We need to make changes to our code to support it.
But we have it on our roadmap for a future version of our product.

May I ask what level of SSL encryption are you looking for?
- Basic TLS encryption
- Basic TLS encryption and client/server certificate validation?

Best,
Fabian

[denlun44]

Hi!
Great to hear!
TLS with and without client/server certificate validation are both of interest and required in some cases.
But even with PostgreSQL automagically installed locally it would be nice with TLS on out of the box...

/dennis

[samsonwilliams]

I am aware that PostgreSQL support is a new (and very welcome) addition to VBR but I am concerned over the total lack of secure communication options.
The documentation on implementing SSL for PostgreSQL does show that it is non-trivial but even if you manage to jump through all the hoops on the server side I can't see how you would configure the secure connection in Veeam, so I am assuming that it is not supported at the moment.
Am I correct in my assumption and is support for SSL in the works?

[Mildur]

Hello Samson

Welcome to the forum.
Thank you for your question. Support for SSL connections to PostgreSQL is on the roadmap. Unfortunately I cannot give you an ETA.

Best,
Fabian

[squebel]

Fabian,

Thought I would ask since the last post is from April... I assume no change and SSL is still not supported to a postgresql db?

[HannesK]

Hello,
correct, but it's still planned.

Best regards
Hannes