From: Tom Lane <tgl@sss.pgh.pa.us>
To: Axel Rau <Axel.Rau@chaos1.de>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: SSL cert "not initialized" error with logical replication with 13.11
Date: Wed, 21 Jun 2023 09:53:22 -0400
Message-ID: <3757321.1687355602@sss.pgh.pa.us> (raw)
In-Reply-To: <F2AB0E5A-3FD7-40F5-A22B-01073F227AD7@Chaos1.DE>
References: <F2AB0E5A-3FD7-40F5-A22B-01073F227AD7@Chaos1.DE>
Axel Rau <Axel.Rau@chaos1.de> writes:
> After upgrading to 13.11, Publisher no longer accepts cert of subscriber.
The error is pretty clear:
> RROR,XX000,"could not connect to the publisher: SSL error: sslv3 alert certificate expired",,,,,,,,,"","logical replication worker"
> Servercert:
> Not Before: Aug 18 09:12:35 2022 GMT
> Not After : Aug 29 09:12:35 2023 GMT
How sure are you that that cert is the one the publisher is using?
Also, maybe the complaint is about a cert being used by the subscriber,
not the publisher? I don't think this error message would distinguish
that.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: tgl@sss.pgh.pa.us, Axel.Rau@chaos1.de, pgsql-admin@lists.postgresql.org
Subject: Re: SSL cert "not initialized" error with logical replication with 13.11
In-Reply-To: <3757321.1687355602@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox