public inbox for [email protected]  

help / color / mirror / Atom feed
From: Markus KARG <[email protected]>
To: [email protected]
To: [email protected]
Subject: Re: Fwd: pgadmin says "SSL error: tlsv1 alert no application protocol"
Date: Wed, 18 Dec 2024 10:18:08 +0100
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
	<[email protected]>
	<[email protected]>
	<CAMa=N=PxEuXgxwZuekb1FAXh8+zK785oVf98nNab3K4qQHpXEA@mail.gmail.com>
	<[email protected]>
	<CAFOhELcK4GLDDDowxdhU2mP8PCnqSySjdAd4-0Hb9zXix+_W5g@mail.gmail.com>
	<[email protected]>

Dave, as it turns out that the reported problem is not caused by PGAdmin 
itself but from the dpage/pgadmin Docker Image in particular, I would 
kindly ask you to chime in here at this point of the discussion. Thanks! :-)

-Markus


Am 16.12.2024 um 20:01 schrieb Markus KARG:
>
> I have not selected the OS and Python version. I am using this image: 
> https://hub.docker.com/layers/dpage/pgadmin4/8.14/images/sha256-1053696a89c887a2a3ee6b24a7e2614cf682... 
>
>
>
> Am 16.12.2024 um 14:39 schrieb Khushboo Vashi:
>>
>>
>> On Mon, Dec 16, 2024 at 6:16 PM Markus KARG <[email protected]> 
>> wrote:
>>
>>     Thank you for your kind help!
>>
>>     The good news first: I downgraded PGAdmin from 8.14 to *8.12 and
>>     everything is working well* then with the exact same
>>     configuration in the exact same environment!
>>
>> Can you please share the OS details? If it is Linux, please share the 
>> details of the Python version as well.
>>
>>     The bad news: 8.13 and 8.14 both do have the described problem.
>>     Apparently something in PGAdmin changed from 8.12 to 8.13 that is
>>     causing this issue. As I could not find something in the release
>>     notes
>>     https://www.pgadmin.org/docs/pgadmin4/8.13/release_notes_8_13.html
>>     that would explain the observed behavior, I would say this is a bug.
>>
>>     Regarding your question: When switching "SSL mode" from "require"
>>     (which causes the message "SSL error: tlsv1 alert no application
>>     protocol") to "prefer" or "disabled", then PGAdmin is running
>>     into a connection timeout. That is no surprise, as the Traefik
>>     3.2 proxy guards PostgreSQL 17.2 server from all non-TLS traffic.
>>
>>     Any ideas? Shall I author a bug report? Do you like to perform
>>     tests in my environment?
>>
>>     -Markus
>>
>>
>>     Am 16.12.2024 um 05:55 schrieb Yogesh Mahajan:
>>>
>>>     Hi,
>>>
>>>     I guess an error is occurring while connecting to the server.
>>>     Can you please check and change SSL mode for server which is
>>>     giving error to 'prefer'/'disabled'
>>>
>>>     Screenshot 2024-12-16 at 10.23.59 AM.png
>>>
>>>     Thanks,
>>>     Yogesh Mahajan
>>>     EnterpriseDB
>>>
>>>
>>>     On Fri, Dec 13, 2024 at 9:01 PM Markus KARG
>>>     <[email protected]> wrote:
>>>
>>>         Could anybody please be so kind and help me with this issue?
>>>         Thanks! :-)
>>>
>>>         Am 12.12.2024 um 22:18 schrieb Markus KARG:
>>>         > I was using PGAdmin with PostgreSQL 17 via Traefik 3
>>>         successfully
>>>         > since many months, but since I recently moved on to
>>>         PostgresSQL 17 the
>>>         > UI of PGAdmin always tells me "SSL error: tlsv1 alert no
>>>         application
>>>         > protocol". All other applications connect successfully.
>>>         >
>>>         > I do not want to use TLSv1, and neither PostgreSQL 17 nor
>>>         Traefik 3 is
>>>         > explicitly configured to use TLS v1. In PGAdmin I
>>>         explicitly have set
>>>         > the min and max SSL versions to 1.3.
>>>         >
>>>         > So I do wonder who in this game is using TLSv1 and how to
>>>         get rid of it?
>>>         >
>>>         > Thanks!
>>>         >
>>>         > -Markus
>>>         >
>>>         >
>>>         >
>>>
>>>

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: Fwd: pgadmin says "SSL error: tlsv1 alert no application protocol"
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox