Received: from makus.postgresql.org (makus.postgresql.org [98.129.198.125]) by mail.postgresql.org (Postfix) with ESMTP id 3BA5E1EC5BE4 for ; Thu, 2 Feb 2012 12:19:04 -0400 (AST) Received: from out2.mail.amis.hr ([188.129.0.5]) by makus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1RszNH-00054O-HM for pgsql-admin@postgresql.org; Thu, 02 Feb 2012 16:19:04 +0000 Received: from out.fsec.sm.srv.amis.hr (out.fsec.sm.srv.amis.hr [192.168.106.22]) by out2.mail.amis.hr (Postfix) with ESMTP id 77B8E1FFAA for ; Thu, 2 Feb 2012 17:18:49 +0100 (CET) Received: from pps.filterd (out [127.0.0.1]) by out.fsec.sm.srv.amis.hr (8.14.3/8.14.3) with SMTP id q12GEf7i031006 for ; Thu, 2 Feb 2012 17:18:49 +0100 Received: from smtp.amis.hr (smtp.sm.srv.amis.hr [192.168.106.39]) by out.fsec.sm.srv.amis.hr with ESMTP id 12qvubr0v6-1 for ; Thu, 02 Feb 2012 17:18:49 +0100 A-Original-Client-UID: 188.129.73.29 splivalo Received: from [192.168.10.1] (cpe-188-129-73-29.dynamic.amis.hr [188.129.73.29]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: splivalo) by smtp.amis.hr (Postfix) with ESMTPSA id 1A3593B3 for ; Thu, 2 Feb 2012 17:18:49 +0100 (CET) Message-ID: <4F2AB6BE.8030506@megafon.hr> Date: Thu, 02 Feb 2012 17:15:58 +0100 From: Mario Splivalo User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:9.0) Gecko/20111220 Thunderbird/9.0 MIME-Version: 1.0 To: pgsql-admin@postgresql.org Subject: Re: ssl3 errors in replication. References: <4F2A3D03.20405@megafon.hr> <25074.1328199374@sss.pgh.pa.us> In-Reply-To: <25074.1328199374@sss.pgh.pa.us> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.6.7361, 1.0.260, 0.0.0000 definitions=2012-02-02_07:2012-02-02, 2012-02-02, 1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 ipscore=0 suspectscore=1 phishscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1202020142 X-Pg-Spam-Score: -1.9 (-) X-Archive-Number: 201202/8 X-Sequence-Number: 39068 On 02/02/2012 05:16 PM, Tom Lane wrote: > Mario Splivalo writes: >> I have these errors in my log files, occurring very often: >> 2012-02-02 01:05:53 CST [4103]: [2-1] user=,db= FATAL: could not >> receive data from WAL stream: SSL error: sslv3 alert unexpected message > > Google suggests that this might be caused by version or configuration > mismatches between openssl libraries on the master and slave machines. > One particular thing I'm wondering about is whether your openssl > libraries deal with the SSL renegotiation bug sanely (ie they've got > a fix for it that's less brain-dead than breaking the connection). Is there a way I can force replication over non-ssl channel? All those boxes are in my private network and ssl is a bit overhead there anyhow. Mario