From: | Network Administrator <netadmin(at)vcsn(dot)com> |
---|---|
To: | Andreas Pflug <pgadmin(at)pse-consulting(dot)de> |
Cc: | timothy(dot)r(dot)morley(at)kc(dot)frb(dot)org, pgadmin-support(at)postgresql(dot)org, "Adam H(dot) Pendleton" <fmonkey(at)fmonkey(dot)net>, Jean-Michel POURE <jm(at)poure(dot)com> |
Subject: | Re: Connnection to SSL enabled server |
Date: | 2003-10-30 15:54:50 |
Message-ID: | 1067529290.3fa1344aeb93c@webmail.vcsn.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgadmin-support |
Quoting Andreas Pflug <pgadmin(at)pse-consulting(dot)de>:
> timothy(dot)r(dot)morley(at)kc(dot)frb(dot)org wrote:
>
> >
> > I've done some more testing. I installed pgadmin3-1.0.1 and
> > pgadmin3-1.1.0-cvs20031030 on a Mandrake 9.2 box. The Mandrake 9.2
> > box has all updates applied and is running openssl-0.9.7b-4.1.92mdk.
> > When I connect from this machine to my SSL enabled PostgreSQL machine
> > pgadmin3 crashes(both versions) when I try to execute a query. I can
> > use either version to connect to my nonSSL PostgreSQL server and I can
> > execute a query. So here is a summary of my current results.
> >
> > Server: PostgreSQL 7.3.4 compiled with option --with-openssl. Openssl
> > version 0.9.7c.
> > 1. RedHat9 client: Pgadmin3 crashes when executing a query while
> > connected to the SSL enabled PostgreSQL server. Pgadmin3 executes
> > query against a nonSSL PostgreSQL server and against the SSL enabled
> > server when ssl = false is set in postgresql.conf. Client has
> > openssl-0.9.7a installed.
> > 2. Mandrake 9.2 client: Same results as with RedHat9 client. Client
> > has openssl-0.9.7b-4.1.92mdk installed.
> > 3. Slackware 9.1: All queries on all servers work. Client has
> > openssl-0.9.7b installed.
> >
>
> So this seems to be not a ssl version problem, but something about the
> platforms. We can reduce you results to
> - RedHat9 and Mandrake 9.2 won't work
> - Slackware does.
> Maybe we need special compiler/link flags for RH and Mandrake :-(
>
> Did you try the binary versions too? Jean-Michel, what's happening on
> your machines when connecting with ssl=require?
>
> Regards,
> Andreas
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 7: don't forget to increase your free space map settings
>
Just to through my $0.02 in. Slackware does work with ssl=reguire but when I
did try to use the visual query tool (not sure how to use it actually) the 10/29
snapshot did crash. I haven't retried it though since I wanted to hear some
other feedback.
Also, anything before OpenSSL 0.9.7c or 0.9.6k is not viable because of a recent
CERT. Please see:
http://www.cert.org/advisories/CA-2003-26.html
--
Keith C. Perry
Director of Networks & Applications
VCSN, Inc.
http://vcsn.com
____________________________________
This email account is being host by:
VCSN, Inc : http://vcsn.com
From | Date | Subject | |
---|---|---|---|
Next Message | Andreas Pflug | 2003-10-30 16:08:01 | Re: Connnection to SSL enabled server |
Previous Message | Andreas Pflug | 2003-10-30 15:26:27 | Re: Constraint Bug |