Alvaro Herrera <alvherre(at)commandprompt(dot)com> writes:
> libpq tries to connect with SSL on and then falls back to SSL off. If
> the latter fails, the error message from the first attempt has been
> overwritten, and only the second one is logged.
> This has been fixed by Magnus on CVS HEAD.
Right. So in the meantime, what Peter should do is try the problem case
after
export PGSSLMODE=require
so that he can see the error message that's relevant to his desired use.
regards, tom lane