SSL/TLS Support in Trove

Trove provides support for enabling SSL/TLS encryption for database instances, including optional mutual TLS (mTLS) authentication.

This section describes the concepts, configuration, and usage of SSL/TLS in Trove.

• Overview
  • SSL operating modes
  • Limitations
• Usage
  • SSL management actions
  • Certificate requirements
  • End-user recommendations
• Preparing Certificates
  • Generate CA private key
  • Create self-signed CA certificate
  • Generate server private key
  • Generate server CSR
  • Sign server certificate with CA
  • Create PKCS#12 container
  • Store PKCS#12 password in Barbican
  • Upload PKCS#12 to Barbican
  • Generate client private key
  • Generate client CSR
  • Sign client certificate
  • PostgreSQL connection using client certificate
• SSL/TLS for replication
  • General behavior
  • Prerequisites
  • Enable SSL in replication
  • Restart behavior
  • Replica provisioning
  • Certificate rotation