--- Jan Wieck <JanWieck at Yahoo.com> wrote:

> On 9/27/2005 4:26 PM, Marc G. Fournier wrote:
> 
> > I know that PostgreSQL does support it, and we
> have for awhile ... but, is 
> > there any docs on setting up Slony with SSL for
> security replication over 
> > a WAN?  Or can Slony even do that?
> 
> Because of some significant redundancy in the
> transferred data it might 
> make sense to do it with a compressed ssh-tunnel
> instead of using 
> libpq's ssl functionality.
> 
> 
> Jan
> 

We tried it, but Slony (with ssl) caused our
Postgresql server to segfault inside SHA1-Init().  So
we now use a seperate SSL tunnel and configured Slony
to NOT use ssl.  (Just like Jan suggests).  It is
working fine so far.


Dennis Jenkins