| From: | Andreas Pflug <pgadmin(at)pse-consulting(dot)de> |
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Cc: | pgsql-bugs(at)postgresql(dot)org |
| Subject: | Re: PG 7.3.1 with ssl on linux hangs (testcase available) |
| Date: | 2003-08-01 19:37:36 |
| Message-ID: | 3F2AC180.2020503@pse-consulting.de |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-bugs |
Tom Lane wrote:
>Andreas Pflug <pgadmin(at)pse-consulting(dot)de> writes:
>
>
>>I currently don't have a system to reproduce this, because I didn't
>>succeed making my 7.4 server accepting ssl-connections. I posted for
>>installation help on pgsql-admin but didn't get a reaction so far. RTFM
>>up and down I couldn't see what I configured wrong (--with-openssl,
>>ssl=true). Can you give me a hint?
>>
>>
>
>No, I didn't see what you did wrong either. Try looking in the
>postmaster log to see if any useful error messages appear.
>
I pushed client_min_messages and log_min_messages to debug5, and the
only suspicious message at startup is
LOG: could not load root cert file "/usr/data/pgsql-7.4/root.crt": No
such file or directory
DETAIL: Will not verify client certificates.
which shouldn't be a problem (pg_hba.conf is configured to trust).
Any connect attempt will log
DEBUG: forked new backend, pid=1826 socket=8
DEBUG: proc_exit(0)
DEBUG: shmem_exit(0)
DEBUG: exit(0)
DEBUG: reaping dead processes
DEBUG: child process (pid 1826) exited with exit code 0
with the client side message "server does not support SSL, but SSL was
required". OpenSSL is 0.9.6g
Regards,
Andreas
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Stephen Frost | 2003-08-01 20:43:52 | pg_hba.conf changes |
| Previous Message | Tom Lane | 2003-08-01 19:24:02 | Re: PG 7.3.1 with ssl on linux hangs (testcase available) |