Re: Fwd: pgadmin says "SSL error: tlsv1 alert no application protocol"

On Mon, Dec 16, 2024 at 6:16 PM Markus KARG <markus(at)headcrashing(dot)eu> wrote:

> Thank you for your kind help!
>
> The good news first: I downgraded PGAdmin from 8.14 to *8.12 and
> everything is working well* then with the exact same configuration in the
> exact same environment!
>
Can you please share the OS details? If it is Linux, please share the
details of the Python version as well.

> The bad news: 8.13 and 8.14 both do have the described problem. Apparently
> something in PGAdmin changed from 8.12 to 8.13 that is causing this issue.
> As I could not find something in the release notes
> https://www.pgadmin.org/docs/pgadmin4/8.13/release_notes_8_13.html that
> would explain the observed behavior, I would say this is a bug.
>
> Regarding your question: When switching "SSL mode" from "require" (which
> causes the message "SSL error: tlsv1 alert no application protocol") to
> "prefer" or "disabled", then PGAdmin is running into a connection timeout.
> That is no surprise, as the Traefik 3.2 proxy guards PostgreSQL 17.2 server
> from all non-TLS traffic.
>
> Any ideas? Shall I author a bug report? Do you like to perform tests in my
> environment?
>
> -Markus
>
>
> Am 16.12.2024 um 05:55 schrieb Yogesh Mahajan:
>
>
> Hi,
>
> I guess an error is occurring while connecting to the server. Can
> you please check and change SSL mode for server which is giving error to
> 'prefer'/'disabled'
>
> [image: Screenshot 2024-12-16 at 10.23.59 AM.png]
>
> Thanks,
> Yogesh Mahajan
> EnterpriseDB
>
>
> On Fri, Dec 13, 2024 at 9:01 PM Markus KARG <markus(at)headcrashing(dot)eu>
> wrote:
>
>> Could anybody please be so kind and help me with this issue? Thanks! :-)
>>
>> Am 12.12.2024 um 22:18 schrieb Markus KARG:
>> > I was using PGAdmin with PostgreSQL 17 via Traefik 3 successfully
>> > since many months, but since I recently moved on to PostgresSQL 17 the
>> > UI of PGAdmin always tells me "SSL error: tlsv1 alert no application
>> > protocol". All other applications connect successfully.
>> >
>> > I do not want to use TLSv1, and neither PostgreSQL 17 nor Traefik 3 is
>> > explicitly configured to use TLS v1. In PGAdmin I explicitly have set
>> > the min and max SSL versions to 1.3.
>> >
>> > So I do wonder who in this game is using TLSv1 and how to get rid of it?
>> >
>> > Thanks!
>> >
>> > -Markus
>> >
>> >
>> >
>>
>>
>>