public inbox for [email protected]  
help / color / mirror / Atom feed
From: Markus KARG <[email protected]>
To: Khushboo Vashi <[email protected]>
Cc: [email protected]
Subject: Re: Fwd: pgadmin says "SSL error: tlsv1 alert no application protocol"
Date: Mon, 16 Dec 2024 20:01:52 +0100
Message-ID: <[email protected]> (raw)
In-Reply-To: <CAFOhELcK4GLDDDowxdhU2mP8PCnqSySjdAd4-0Hb9zXix+_W5g@mail.gmail.com>
References: <[email protected]>
	<[email protected]>
	<[email protected]>
	<CAMa=N=PxEuXgxwZuekb1FAXh8+zK785oVf98nNab3K4qQHpXEA@mail.gmail.com>
	<[email protected]>
	<CAFOhELcK4GLDDDowxdhU2mP8PCnqSySjdAd4-0Hb9zXix+_W5g@mail.gmail.com>

I have not selected the OS and Python version. I am using this image: 
https://hub.docker.com/layers/dpage/pgadmin4/8.14/images/sha256-1053696a89c887a2a3ee6b24a7e2614cf682... 



Am 16.12.2024 um 14:39 schrieb Khushboo Vashi:
>
>
> On Mon, Dec 16, 2024 at 6:16 PM Markus KARG <[email protected]> 
> wrote:
>
>     Thank you for your kind help!
>
>     The good news first: I downgraded PGAdmin from 8.14 to *8.12 and
>     everything is working well* then with the exact same configuration
>     in the exact same environment!
>
> Can you please share the OS details? If it is Linux, please share the 
> details of the Python version as well.
>
>     The bad news: 8.13 and 8.14 both do have the described problem.
>     Apparently something in PGAdmin changed from 8.12 to 8.13 that is
>     causing this issue. As I could not find something in the release
>     notes
>     https://www.pgadmin.org/docs/pgadmin4/8.13/release_notes_8_13.html
>     that would explain the observed behavior, I would say this is a bug.
>
>     Regarding your question: When switching "SSL mode" from "require"
>     (which causes the message "SSL error: tlsv1 alert no application
>     protocol") to "prefer" or "disabled", then PGAdmin is running into
>     a connection timeout. That is no surprise, as the Traefik 3.2
>     proxy guards PostgreSQL 17.2 server from all non-TLS traffic.
>
>     Any ideas? Shall I author a bug report? Do you like to perform
>     tests in my environment?
>
>     -Markus
>
>
>     Am 16.12.2024 um 05:55 schrieb Yogesh Mahajan:
>>
>>     Hi,
>>
>>     I guess an error is occurring while connecting to the server. Can
>>     you please check and change SSL mode for server which is giving
>>     error to 'prefer'/'disabled'
>>
>>     Screenshot 2024-12-16 at 10.23.59 AM.png
>>
>>     Thanks,
>>     Yogesh Mahajan
>>     EnterpriseDB
>>
>>
>>     On Fri, Dec 13, 2024 at 9:01 PM Markus KARG
>>     <[email protected]> wrote:
>>
>>         Could anybody please be so kind and help me with this issue?
>>         Thanks! :-)
>>
>>         Am 12.12.2024 um 22:18 schrieb Markus KARG:
>>         > I was using PGAdmin with PostgreSQL 17 via Traefik 3
>>         successfully
>>         > since many months, but since I recently moved on to
>>         PostgresSQL 17 the
>>         > UI of PGAdmin always tells me "SSL error: tlsv1 alert no
>>         application
>>         > protocol". All other applications connect successfully.
>>         >
>>         > I do not want to use TLSv1, and neither PostgreSQL 17 nor
>>         Traefik 3 is
>>         > explicitly configured to use TLS v1. In PGAdmin I
>>         explicitly have set
>>         > the min and max SSL versions to 1.3.
>>         >
>>         > So I do wonder who in this game is using TLSv1 and how to
>>         get rid of it?
>>         >
>>         > Thanks!
>>         >
>>         > -Markus
>>         >
>>         >
>>         >
>>
>>

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: Fwd: pgadmin says "SSL error: tlsv1 alert no application protocol"
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox