From: | Vitaliyi <imgrey(at)gmail(dot)com> |
---|---|
To: | pgsql-general(at)postgresql(dot)org |
Subject: | SSL auth problem |
Date: | 2008-05-16 19:56:30 |
Message-ID: | 3aac340805161256r7f8e5932rfc9d4aebb0cbe2c3@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
> It does not cause an error, but omit -text.
done
> Did you make sure that postgresql.key has permissions 0600?
of course. otherwise it shows warning
>> files on postgresql server:
>> server.key (priv and pub keys)
>
> Did you make sure that server.key has permissions 0600?
yes
>> psql: SSL error: sslv3 alert bad certificate
>
> That means, I guess, that the client does not like its certificate files.
>
> Check that they are ok, with something like
>
> openssl x509 -noout -dates -issuer -subject -in root.crt
> or
> openssl x509 -noout -text -in root.crt
>
> Same for root.crt.
%openssl x509 -noout -dates -issuer -subject -in postgresql.crt
notBefore=May 16 13:55:49 2008 GMT
notAfter=Jun 15 13:55:49 2008 GMT
issuer= /C=UK/ST=Some-State/L=Kiev/O=0x2A/CN=80.93.122.34/emailAddress=support(at)0x2a-dc(dot)com
subject= /C=UK/ST=Some-State/L=Kiev/O=Internet Widgits Pty
Ltd/CN=localhost/emailAddress=imgrey(at)gmail(dot)com
%openssl x509 -noout -dates -issuer -subject -in root.crt
notBefore=May 16 13:49:57 2008 GMT
notAfter=Jun 15 13:49:57 2008 GMT
issuer= /C=UK/ST=Some-State/L=Kiev/O=0x2A/CN=80.93.122.34/emailAddress=support(at)0x2a-dc(dot)com
subject= /C=UK/ST=Some-State/L=Kiev/O=0x2A/CN=80.93.122.34/emailAddress=support(at)0x2a-dc(dot)com
btw, the same:
psql: SSL error: sslv3 alert bad certificate
postgres[29563]: [3-1] LOG: could not accept SSL connection: no
certificate returned
From | Date | Subject | |
---|---|---|---|
Next Message | D. Dante Lorenso | 2008-05-16 20:09:06 | Re: PostgreSQL executing my function too many times during query |
Previous Message | Bill Moran | 2008-05-16 19:44:58 | Using role priviledges for pg_dump |