Re: PQConnectdb SSL (sslmode): Is this a bug

From: vishal saberwal <vishalsaberwal(at)gmail(dot)com>
To: Michael Fuhr <mike(at)fuhr(dot)org>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-general(at)postgresql(dot)org
Subject: Re: PQConnectdb SSL (sslmode): Is this a bug
Date: 2005-08-29 23:25:15
Message-ID: 3e74dc250508291625dd8d7d5@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

oops i forgot to attach logfile output for the second case (LIBPQ.SO.3.1) :
[root(at)localhost DBApi]# cat /var/lib/pgsql/logfile
LOG: database system was interrupted at 2005-08-29 15:01:11 PDT
LOG: checkpoint record is at 0/655FF630
LOG: redo record is at 0/655FF630; undo record is at 0/0; shutdown TRUE
LOG: next transaction ID: 15567; next OID: 11920206
LOG: database system was not properly shut down; automatic recovery in
progress
LOG: record with zero length at 0/655FF66C
LOG: redo is not required
LOG: database system is ready
LOG: could not accept SSL connection: peer did not return a certificate

On 8/26/05, Michael Fuhr <mike(at)fuhr(dot)org> wrote:
> >
> > On Fri, Aug 26, 2005 at 01:57:36PM -0700, vishal saberwal wrote:
> > > I am not sure as to how i can find the version of libpq that i am
> > > using on my server. My test file has sslmode=prefer. This is what i
> > > did:
> > > (a)
> > > [root(at)localhost serv]# ./bin/test_lib
> > > Connection failed: SSL error: sslv3 alert handshake failure
> >
> > I asked what appeared in the server's logs when this happened but
> > I don't see that information in your post. Those log entries might
> > be useful, so please post them if you continue to have trouble.
> >
> > > ret=-1
> > > [root(at)localhost serv]# ldd ./bin/test_lib
> > > ...
> > > libpq.so.3 => /usr/lib/libpq.so.3 (0x002ee000)
> >
> > What's the output of the following command?
> >
> > ls -l /usr/lib/libpq.so*
> >
> > In my 7.4.8 installation I see the following:
> >
> > libpq.so -> libpq.so.3.1
> > libpq.so.3 -> libpq.so.3.1
> > libpq.so.3.1
> >
> > As I recall, 8.0.1's libpq was libpq.so.3.2 (this was changed to
> > libpq.so.4.0 in 8.0.2), so the library's minor version should tell
> > you which version of PostgreSQL you're linked against.
> >
> > I asked if the certificate works with psql, and if it does, for you
> > to show the output of "ldd psql". I don't see that output -- does
> > psql work? If so then please post its ldd output.
> >
> > > [root(at)localhost libk2]# ./bin/test_k2
> > > Connection failed: could not open certificate file
> > > "/root/.postgresql/postgresql.crt": No such file or directory
> >
> > What's test_k2? It's looking for the certificate, although perhaps
> > not where you want it to. What happens if you run this program as
> > a user that has a certificate, or if you install the certificate
> > and key in /root/.postgresql? Also, I don't see test_k2's ldd
> > output -- is it linked against /usr/local/pgsql/lib/libpq.so.3?
> > If so, what's the output of the following command?
> >
> > ls -l /usr/local/pgsql/lib/libpq.so*
> >
> > I'm wondering if you have PostgreSQL 7.4's libraries installed in
> > /usr/lib and 8.0.1's libraries in /usr/local/pgsql/lib. Is that
> > what you've done?
> >
> > --
> > Michael Fuhr
> >
>
>

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Tom Lane 2005-08-29 23:39:09 Re: About dropped notifications
Previous Message vishal saberwal 2005-08-29 23:23:13 Re: PQConnectdb SSL (sslmode): Is this a bug