diff --git a/scripts/enable_ssl.sh b/scripts/enable_ssl.sh index a3b20db..a3af562 100755 --- a/scripts/enable_ssl.sh +++ b/scripts/enable_ssl.sh @@ -1,6 +1,6 @@ #!/bin/bash pushd /var/lib/postgresql/data >/dev/null -openssl req -new -newkey rsa:4096 -x509 -nodes -out server.crt -keyout server.key -batch +openssl req -new -newkey rsa:4096 -x509 -days 365000 -nodes -out server.crt -keyout server.key -batch chmod 600 server.key sed -i "s/^#ssl = off/ssl = on/" postgresql.conf sed -i "s/^#ssl_ciphers =.*/ssl_ciphers = 'AES256+EECDH:AES256+EDH'/" postgresql.conf