Re: Fwd: pgadmin says "SSL error: tlsv1 alert no application protocol"

Thank you for your kind help!

The good news first: I downgraded PGAdmin from 8.14 to *8.12 and
everything is working well* then with the exact same configuration in
the exact same environment!

The bad news: 8.13 and 8.14 both do have the described problem.
Apparently something in PGAdmin changed from 8.12 to 8.13 that is
causing this issue. As I could not find something in the release notes
https://www.pgadmin.org/docs/pgadmin4/8.13/release_notes_8_13.html that
would explain the observed behavior, I would say this is a bug.

Regarding your question: When switching "SSL mode" from "require" (which
causes the message "SSL error: tlsv1 alert no application protocol") to
"prefer" or "disabled", then PGAdmin is running into a connection
timeout. That is no surprise, as the Traefik 3.2 proxy guards PostgreSQL
17.2 server from all non-TLS traffic.

Any ideas? Shall I author a bug report? Do you like to perform tests in
my environment?

-Markus

Am 16.12.2024 um 05:55 schrieb Yogesh Mahajan:
>
> Hi,
>
> I guess an error is occurring while connecting to the server. Can
> you please check and change SSL mode for server which is giving error
> to 'prefer'/'disabled'
>
> Screenshot 2024-12-16 at 10.23.59 AM.png
>
> Thanks,
> Yogesh Mahajan
> EnterpriseDB
>
>
> On Fri, Dec 13, 2024 at 9:01 PM Markus KARG <markus(at)headcrashing(dot)eu>
> wrote:
>
> Could anybody please be so kind and help me with this issue?
> Thanks! :-)
>
> Am 12.12.2024 um 22:18 schrieb Markus KARG:
> > I was using PGAdmin with PostgreSQL 17 via Traefik 3 successfully
> > since many months, but since I recently moved on to PostgresSQL
> 17 the
> > UI of PGAdmin always tells me "SSL error: tlsv1 alert no
> application
> > protocol". All other applications connect successfully.
> >
> > I do not want to use TLSv1, and neither PostgreSQL 17 nor
> Traefik 3 is
> > explicitly configured to use TLS v1. In PGAdmin I explicitly
> have set
> > the min and max SSL versions to 1.3.
> >
> > So I do wonder who in this game is using TLSv1 and how to get
> rid of it?
> >
> > Thanks!
> >
> > -Markus
> >
> >
> >
>
>