Re: pg_dump error

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Campbell, Lance" <lance(at)illinois(dot)edu>
Cc: "pgsql-admin(at)postgresql(dot)org" <pgsql-admin(at)postgresql(dot)org>
Subject: Re: pg_dump error
Date: 2015-07-20 13:59:50
Message-ID: 14015.1437400790@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

"Campbell, Lance" <lance(at)illinois(dot)edu> writes:
> As a follow-up I ran this command:
> pg_dump -U username -h localhost databasename -f databasename.20150720

> I get this in the console:
> pg_dump: [archiver (db)] query failed: SSL error: unexpected message
> pg_dump: [archiver (db)] query was: SET search_path = calendar, pg_catalog

That looks like you've run into the renegotiation bug that Red Hat
introduced in their last openssl patch:
https://bugzilla.redhat.com/show_bug.cgi?id=1234487

So basically things will work until you exceed a couple gigabytes of
traffic on the connection, and then bang.

The workaround we're recommending to people is to set
ssl_renegotiation_limit to zero (disable it) in postgresql.conf, as
renegotiation seems to create way more problems than it fixes (this
RH bug was very far from the first such problem, and it's not likely
to be the last either).

See recent discussions on pgsql-hackers, where it was more or less
agreed that we're going to remove the feature altogether in the future.

regards, tom lane

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Natalie Wenz 2015-07-20 16:20:18 Re: postgres_fdw user mapping and role inheritance
Previous Message Campbell, Lance 2015-07-20 13:03:58 Re: pg_dump error