Re: SSL cert "not initialized" error with logical replication with 13.11

Hello

expired CA certificate could also cause "SSL error: sslv3 alert certificate expired" error. You should check the validity of your CA certificate. 

You can use this openssl command to verify your CA and your server certificate, see if it gives the same "certificate verify failed" error

openssl verify -verbose -CAfile $PATH_TO_CACERT $PATH_TO_SERVER_CERT

or it could be that your server clock is wrong, which is unlikely though.

best regards

Cary Huang

-----------------------------

Highgo Software (Canada)

www.highgo.ca

---- On Wed, 21 Jun 2023 08:05:15 -0700 Jeff Janes <jeff(dot)janes(at)gmail(dot)com> wrote ---

On Wed, Jun 21, 2023 at 6:11 AM Axel Rau <mailto:Axel(dot)Rau(at)chaos1(dot)de> wrote:

Hi all,

After upgrading to 13.11, Publisher no longer accepts cert of subscriber.

What did you upgrade from?  How did you do the upgrade?

Publisher:

"connection received: host=<some IP6> port=32501",,,,,,,,,"","not initialized"
"could not accept SSL connection: certificate verify failed",,,,,,,,,"","not initialized"

Your log files appear to have been mutilated.  What column is 'not initialized' appearing in?

Servercert:
...
 

        Validity
            Not Before: Aug 18 09:12:35 2022 GMT
            Not After : Aug 29 09:12:35 2023 GMT

What about the validity of the CA?

Cheers,

Jeff