Re: BUG #12769: SSL-Renegotiation failures

Hi Arne,

On 2015-02-13 18:52:02 +0000, pilum(dot)70(at)uni-muenster(dot)de wrote:
> The following bug has been logged on the website:
>
> Bug reference: 12769
> Logged by: Arne Scheffer
> Email address: pilum(dot)70(at)uni-muenster(dot)de
> PostgreSQL version: 9.3.6
> Operating system: CentOS6, openssl version OpenSSL 1.0.1e-fips
> Description:
>
> I get ssl renegotiation failures with streaming standbys. Sometimes the
> connection breaks and is reconnected afterwards. However, if I use
> pg_basebackup (same libpq connection string), I don't get any of these
> failures, allthough the transferred data ist far beyond 512 MB
> So I don't think it's the
> ssl renegotiation bug (openssl of a yum update patched centos6)
> If I disable ssl_renegotiation_limit to 0, there are no errors any more,
> but that is only a workaround, no solution.

Heikki and me have recently investigated problems around SSL
renegotiation. See
http://www.postgresql.org/message-id/20150126101405.GA31719@awork2.anarazel.de
.

Greetings,

Andres Freund