PQConnectdb SSL (sslmode): Is this a bug

From: vishal saberwal <vishalsaberwal(at)gmail(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: PQConnectdb SSL (sslmode): Is this a bug
Date: 2005-08-26 17:23:10
Message-ID: 3e74dc2505082610233671fedf@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

hi,
I am not sure if this is a bug.

My PG_HBA.CONF
----------------------------
local all all trust
host all all 127.0.0.1 255.255.255.255 trust
host all all 192.168.0.0/16 trust
hostssl dbm all 192.168.200.201 255.255.255.255 md5

CODE
---------------------------
PGConn* connection=PQconnectdb("hostaddr=192.168.200.10 dbname=dbm
user=postgres sslmode=prefer");
if (PQstatus(connection)==CONNECTION_OK)
return 0;
else
{
fprintf(stderr. "connection failure: %s",PQerrorMessage(connection));
return -1;
}
--------------
OUTPUT:
connection failure: SSL error: sslv3 alert handshake failure

-----------

Now when I change the above function to one with sslmode=allow, the
connection is established and query runs.

I do have (ssl=true) in postgresql.conf and have tested the
certificates and they are working right. I also restart the postmaster
after every change in postgresql.conf and pg_hba.conf.

I would prefer the connections are SSL and hence would like to use the
default "prefer" sslmode.

vish

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Chris Travers 2005-08-26 17:26:44 Re: Postgresql replication
Previous Message Joshua D. Drake 2005-08-26 17:19:56 Re: Serials jumping