SSL with Beta3 - "could not load root certificate file"

From: "G Reina" <reina_ga(at)hotmail(dot)com>
To: pgsql-hackers(at)postgresql(dot)org
Subject: SSL with Beta3 - "could not load root certificate file"
Date: 2004-10-09 09:03:09
Message-ID: BAY8-F25DE8IqpFuiHV000044bf@hotmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

I know that some SSL stuff was corrected between beta2 and beta3. I've been
getting an error at postmaster startup, but don't know enough about SSL to
determine if it is ok. Encryption seems to be working (which is all I care
about).

The error in the serverlog is:
LOG: could not load root certificate file
"/database/local/pgsql/data/root.crt": No such file or directory
DETAIL: Will not verify client certificates.
LOG: database system was shut down at 2004-10-09 10:50:50 CEST
LOG: checkpoint record is at 0/464C90C
LOG: redo record is at 0/464C90C; undo record is at 0/0; shutdown TRUE
LOG: next transaction ID: 39081; next OID: 21438
LOG: database system is ready

The SSL certificate (server.crt) was made following the instructions in the
Postgres documentation. Note, that root.crt is not specified in this
documentation. I'm not sure if the file needs to be called 'root.crt' or
'server.crt'. Simply renaming the file doesn't work as I get an error:

psql: SSL error: sslv3 alert handshake failure

I'm sure this is just a misunderstanding on my part, but thought it could be
spelled out a little better in the on-line documentation.

-Tony

Setup: PostgreSQL 8.0.0beta3 on i686-pc-linux-gnu, compiled by GCC gcc
(GCC) 3.3.2 20031022 (Red Hat Linux 3.3.2-1) (Fedora Core 1)

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
hthttp://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Kevin Brown 2004-10-09 11:20:48 Re: First set of OSDL Shared Mem scalability results, some wierdness ...
Previous Message Peter Davie 2004-10-09 06:45:57 Re: [BUGS] BUG #1270: stack overflow in thread in fe_getauthname