From: Holger Jakobs <holger@jakobs.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: unknown postgres ssl error "could not accept SSL connection: Success" and timeout
Date: Mon, 8 May 2023 13:48:30 +0200
Message-ID: <9c9337f9-4e4b-fcf4-fd34-98461b686888@jakobs.com> (raw)
In-Reply-To: <CAM7mqYuHFP__wO-yyMmGWoiBJMrE3EFQG5QDdKMESBPvov9WYg@mail.gmail.com>
References: <CAECa+gbN4kwke020Wp1PGDYXFpqjryhOoWtSXv5k5eN4pSL=9w@mail.gmail.com>
<CAM7mqYuHFP__wO-yyMmGWoiBJMrE3EFQG5QDdKMESBPvov9WYg@mail.gmail.com>
Am 08.05.23 um 12:17 schrieb Barjesh Vashist:
> Hi Sergey,
>
> Please ensure the pg_hba.conf has enabled the SSL.
> Eg.
> |hostssl all all 0.0.0.0/0 md5|
>
It's not necessary to use hostssl records, host records will do as well.
In an SSL environment, hostssl makes sense, though. But it doesn't help
in tracking down the problem.
But - if your version supports it - use scram-sha-256 and not md5.
And don't allow access to all databases by all users from any IP address.
For testing purposes this may ok, but not in real life.
If pg_hba settings were the problem, they would show up clearly as such
in the log, but that's obivously not the case.
Regards,
Holger
--
Holger Jakobs, Bergisch Gladbach, Tel. +49-178-9759012
Attachments:
[application/pgp-signature] OpenPGP_signature (202B, ../9c9337f9-4e4b-fcf4-fd34-98461b686888@jakobs.com/3-OpenPGP_signature)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: holger@jakobs.com, pgsql-admin@lists.postgresql.org
Subject: Re: unknown postgres ssl error "could not accept SSL connection: Success" and timeout
In-Reply-To: <9c9337f9-4e4b-fcf4-fd34-98461b686888@jakobs.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox