Date: Wed, 29 Oct 2008 15:54:34 -0300
From: Alvaro Herrera <alvherre@commandprompt.com>
To: Scott Marlowe <scott.marlowe@gmail.com>
Cc: Peter Koczan <pjkoczan@gmail.com>,
	"pgsql-admin@postgresql.org" <pgsql-admin@postgresql.org>
Subject: Re: SSL and md5 password?
Message-ID: <20081029185434.GH4331@alvh.no-ip.org>
References: <4544e0330810291007p5b68fba2o4ee782b4d4f92878@mail.gmail.com>
	<dcc563d10810291149w520c718v2a2557f183aa604@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <dcc563d10810291149w520c718v2a2557f183aa604@mail.gmail.com>
User-Agent: Mutt/1.5.18 (2008-05-17)

Scott Marlowe escribió:
> On Wed, Oct 29, 2008 at 11:07 AM, Peter Koczan <pjkoczan@gmail.com> wrote:

> > And an md5 connection...
> >
> > $ /s/postgresql/bin/psql -h dumbo.cs.wisc.edu -p 5432 -U test_md5 koczan_test
> > Password for user test_md5:
> > psql: FATAL:  no pg_hba.conf entry for host "128.105.162.36", user
> > "test_md5", database "koczan_test", SSL off
> 
> According to this, you're trying to connect with SSL off, right?  I
> don't think you've got any matching lines for that in your
> pg_hba.conf.  But I could be reading that wrong.

libpq tries to connect with SSL on and then falls back to SSL off.  If
the latter fails, the error message from the first attempt has been
overwritten, and only the second one is logged.

This has been fixed by Magnus on CVS HEAD.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
PostgreSQL Replication, Consulting, Custom Development, 24x7 support