Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps
 (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1lAhPk-0005yx-Rb
	for pgsql-admin@arkaria.postgresql.org; Fri, 12 Feb 2021 22:59:52 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.92)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1lAhPj-0000mp-Mb
	for pgsql-admin@arkaria.postgresql.org; Fri, 12 Feb 2021 22:59:51 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1lAhPj-0000mi-FP
	for pgsql-admin@lists.postgresql.org; Fri, 12 Feb 2021 22:59:51 +0000
Received: from sss.pgh.pa.us ([66.207.139.130])
	by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1lAhPh-0002Um-Ce
	for pgsql-admin@postgresql.org; Fri, 12 Feb 2021 22:59:51 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 11CMxkMk1611196;
	Fri, 12 Feb 2021 17:59:46 -0500
From: Tom Lane <tgl@sss.pgh.pa.us>
To: jian xu <jamesxu@outlook.com>
cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: pg13 psql can't connect pg instance with ssl enabled after
 upgrading
In-reply-to: 
 <BL0PR02MB45612EA590D8ACB9A14A0E7BA18B9@BL0PR02MB4561.namprd02.prod.outlook.com>
References: 
 <BL0PR02MB456168A5C9909C71C578CFFDA18B9@BL0PR02MB4561.namprd02.prod.outlook.com>,<1608034.1613166623@sss.pgh.pa.us>
 <BL0PR02MB45612EA590D8ACB9A14A0E7BA18B9@BL0PR02MB4561.namprd02.prod.outlook.com>
Comments: In-reply-to jian xu <jamesxu@outlook.com>
	message dated "Fri, 12 Feb 2021 22:52:14 +0000"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <1611194.1613170786.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Fri, 12 Feb 2021 17:59:46 -0500
Message-ID: <1611195.1613170786@sss.pgh.pa.us>
List-Id: <pgsql-admin.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-admin@lists.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-admin>
Precedence: bulk

jian xu <jamesxu@outlook.com> writes:
> Thanks Tom.  you are right, we are using GSS authentication. and psql ve=
rsion is 13.1
> postgresql_13_1/bin/psql --version
> psql (PostgreSQL) 13.1

Ah.  Then perhaps you want hostgssenc not hostssl in your pg_hba
entries.  But I'd definitely recommend an update to 13.2, as it
fixes a number of GSS bugs besides this one.

			regards, tom lane