Re: sha256 certificate "unknown message digest algorithm"

From: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
To: Frazer McLean <frazer(at)frazermclean(dot)co(dot)uk>, pgsql-general(at)postgresql(dot)org
Subject: Re: sha256 certificate "unknown message digest algorithm"
Date: 2016-02-23 16:20:23
Message-ID: 56CC86C7.4040301@aklaver.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 02/23/2016 05:18 AM, Frazer McLean wrote:
> Hi,
> I am using PostgreSQL 9.4.6 and openssl 1.0.2f. If my server or client
> certificate use SHA256, I get the following error on the client:
> psql: SSL error: tlsv1 alert decrypt error
> And the following log message on the server:
> LOG: could not accept SSL connection: unknown message digest algorithm
> I could use -sha1 to generate my certificates but -sha256 should work,

Some searching indicates this is usually an OpenSSL version issue.

So the OpenSSL version you mention above is where, the client or the
server or both?

Where did you install Postgres from and what version of OpenSSL was it
compiled against?

> right?
> Thanks,
> Frazer

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message xujian 2016-02-23 16:29:29 Does pglogical support cascade replication?
Previous Message Steve Crawford 2016-02-23 16:19:46 Re: PostgreSQL flavors