DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:cc:in-reply-to:mime-version
	:content-type:content-transfer-encoding:content-disposition
	:references;
	b=pcdr2YwP7wFmlfvKBc7ZZDGjVQ24qZnNf4xFSS6CiX48Hml2fHvXXoJMrqH8MhCQWA
	d/hiKi0nz2U+Y+2YvW+KCctuSLpwimVX/msRnhC6D3CyfbayJ69AHPeAvXrCYXeMOPeQ
	hEMtK8XHgFKOCV4ZiZQBDxgGaEsLIFd/fPSuE=
Message-ID: <dcc563d10810291149w520c718v2a2557f183aa604@mail.gmail.com>
Date: Wed, 29 Oct 2008 12:49:26 -0600
From: "Scott Marlowe" <scott.marlowe@gmail.com>
To: "Peter Koczan" <pjkoczan@gmail.com>
Subject: Re: SSL and md5 password?
Cc: "pgsql-admin@postgresql.org" <pgsql-admin@postgresql.org>
In-Reply-To: <4544e0330810291007p5b68fba2o4ee782b4d4f92878@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <4544e0330810291007p5b68fba2o4ee782b4d4f92878@mail.gmail.com>

On Wed, Oct 29, 2008 at 11:07 AM, Peter Koczan <pjkoczan@gmail.com> wrote:
> Hi all,
>
> I'm looking to add an md5-based user to a postgres server, and I can't
> seem to get psql to connect using SSL. Normally I use Kerberos to
> connect, and that works flawlessly with SSL. I'd much prefer to use
> SSL connections, so I'm wondering if there's something I'm doing
> wrong.
>
> Here's what happens with a Kerberos connection...works just fine,
> connects using SSL:
>
> $ /s/postgresql/bin/psql -h dumbo.cs.wisc.edu -p 5432 koczan_test
> Welcome to psql 8.3.4, the PostgreSQL interactive terminal.
>
> Type:  \copyright for distribution terms
>       \h for help with SQL commands
>       \? for help with psql commands
>       \g or terminate with semicolon to execute query
>       \q to quit
>
> SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
>
> koczan_test=>
>
> And an md5 connection...
>
> $ /s/postgresql/bin/psql -h dumbo.cs.wisc.edu -p 5432 -U test_md5 koczan_test
> Password for user test_md5:
> psql: FATAL:  no pg_hba.conf entry for host "128.105.162.36", user
> "test_md5", database "koczan_test", SSL off

According to this, you're trying to connect with SSL off, right?  I
don't think you've got any matching lines for that in your
pg_hba.conf.  But I could be reading that wrong.