[7.3] can't connect with SSL

From: valerian <valerian2(at)hotpop(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: [7.3] can't connect with SSL
Date: 2002-12-06 17:37:06
Message-ID: 20021206173706.GA7812@hotpop.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

I just upgraded my server from 7.2.1 to 7.3 last night, and can no longer
connect over SSL (unencrypted connections still work ok, but I really need
SSL). I get the following error messages when I try to connect:

psql (PostgreSQL client) 7.2.1
psql: could not establish SSL connection: No SSL error reported

serverlog:
FATAL: failed to initialize SSL connection: wrong version number

I have the same version of openssl on both the client and server
machines. Both are running Debian 3.0, with these libs:
- libssl-dev 0.9.6c-2.woody SSL development libraries, header files
- libssl0.9.6 0.9.6c-2.woody SSL shared libraries
- openssl 0.9.6c-2.woody Secure Socket Layer (SSL) binary and related

My server configuration is like so (everything else is default):

pg_hba.conf:
# TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
local all all crypt
hostssl all all 0.0.0.0 0.0.0.0 md5

postgresql.conf:
tcpip_socket = true
ssl = true

It was of course also configured for use with SSL:
/configure --with-perl --with-openssl=/usr/include/openssl
checking for SSL_library_init in -lssl... yes
checking openssl/ssl.h usability... yes
checking openssl/ssl.h presence... yes
checking for openssl/ssl.h... yes
checking openssl/err.h usability... yes
checking openssl/err.h presence... yes
checking for openssl/err.h... yes

Now it sounds to me like this is an SSL handshake problem, but I don't
see why, because I have exactly the same version of openssl on both the
client and server machines. On my client machine, I still have v7.2.1
of 'psql' (the client binary) as that's what came bundled with my
operating system. I'm fairly certain that's not what's causing the
problem though (or is it?)

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2002-12-06 17:44:13 Re: [7.3] can't connect with SSL
Previous Message Tom Lane 2002-12-06 16:57:25 Re: setval('myfunsequence', 0)