Re: unknown postgres ssl error "could not accept SSL connection: Success" and timeout

From: Holger Jakobs <holger(at)jakobs(dot)com>
To: pgsql-admin(at)lists(dot)postgresql(dot)org
Subject: Re: unknown postgres ssl error "could not accept SSL connection: Success" and timeout
Date: 2023-05-08 11:48:30
Message-ID: 9c9337f9-4e4b-fcf4-fd34-98461b686888@jakobs.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Am 08.05.23 um 12:17 schrieb Barjesh Vashist:
> Hi Sergey,
>
> Please ensure the pg_hba.conf has enabled the SSL.
> Eg.
> |hostssl all all 0.0.0.0/0 md5|
>
It's not necessary to use hostssl records, host records will do as well.
In an SSL environment, hostssl makes sense, though. But it doesn't help
in tracking down the problem.

But - if your version supports it - use scram-sha-256 and not md5.

And don't allow access to all databases by all users from any IP address.

For testing purposes this may ok, but not in real life.

If pg_hba settings were the problem, they would show up clearly as such
in the log, but that's obivously not the case.

Regards,

Holger

--
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Nikhil Ingale 2023-05-08 12:23:32 Find out the indexed columns
Previous Message Barjesh Vashist 2023-05-08 10:17:22 Re: unknown postgres ssl error "could not accept SSL connection: Success" and timeout