Re: SSL Certificates in Windows 7 & Postgres 9.3

From: David G Johnston <david(dot)g(dot)johnston(at)gmail(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: SSL Certificates in Windows 7 & Postgres 9.3
Date: 2014-12-15 22:45:16
Message-ID: 1418683516815-5830784.post@n5.nabble.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

harpagornis wrote
> I changed the CN in all the certificates from 127.0.0.1 "my_role", which
> is the user id. Now the pg_log contains this:
> ---------------------------------------------------------------------------------------
> 2014-12-15 22:28:04 GMT LOG: database system was shut down at 2014-12-15
> 22:28:01 GMT
> 2014-12-15 22:28:04 GMT LOG: database system is ready to accept
> connections
> 2014-12-15 22:28:04 GMT LOG: autovacuum launcher started
> 2014-12-15 22:28:05 GMT FATAL: the database system is starting up
> 2014-12-15 22:28:06 GMT FATAL: connection requires a valid client
> certificate
> 2014-12-15 22:28:06 GMT FATAL: no pg_hba.conf entry for host "127.0.0.1",
> user "SYSTEM", database "postgres", SSL off

The first question I'd ask is who this "SYSTEM" user is. I don't recall
that any PostgreSQL code identifies itself as "SYSTEM" but given how quickly
it attempts to connect I may simply be mistaken. Regardless, you either
need to get "SYSTEM" to use an SSL client certificate or create an
pg_hba.conf entry that will allow it to connect without one.

David J.

--
View this message in context: http://postgresql.nabble.com/SSL-Certificates-in-Windows-7-Postgres-9-3-tp5830749p5830784.html
Sent from the PostgreSQL - general mailing list archive at Nabble.com.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Adrian Klaver 2014-12-15 22:47:57 Re: SSL Certificates in Windows 7 & Postgres 9.3
Previous Message harpagornis 2014-12-15 22:36:38 Re: SSL Certificates in Windows 7 & Postgres 9.3