Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 242A464FDA1 for ; Wed, 29 Oct 2008 23:11:08 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 64917-01 for ; Wed, 29 Oct 2008 23:11:05 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by postgresql.org (Postfix) with ESMTP id 58C4C64FCAC for ; Wed, 29 Oct 2008 23:11:05 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id m9U2B06E002765; Wed, 29 Oct 2008 22:11:00 -0400 (EDT) To: Alvaro Herrera cc: Scott Marlowe , Peter Koczan , "pgsql-admin@postgresql.org" Subject: Re: SSL and md5 password? In-reply-to: <20081029185434.GH4331@alvh.no-ip.org> References: <4544e0330810291007p5b68fba2o4ee782b4d4f92878@mail.gmail.com> <20081029185434.GH4331@alvh.no-ip.org> Comments: In-reply-to Alvaro Herrera message dated "Wed, 29 Oct 2008 15:54:34 -0300" Date: Wed, 29 Oct 2008 22:11:00 -0400 Message-ID: <2764.1225332660@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200810/176 X-Sequence-Number: 30632 Alvaro Herrera writes: > libpq tries to connect with SSL on and then falls back to SSL off. If > the latter fails, the error message from the first attempt has been > overwritten, and only the second one is logged. > This has been fixed by Magnus on CVS HEAD. Right. So in the meantime, what Peter should do is try the problem case after export PGSSLMODE=require so that he can see the error message that's relevant to his desired use. regards, tom lane