pg.ddx.io pgsql-bugs@postgresql.org mailing list archive
help / color / mirror / Atom feedBUG #17210: Postgres Let'sEncrypt root certificate is expired and breaks installation of postgres-client
2+ messages / 2 participants
[nested] [flat]
* BUG #17210: Postgres Let'sEncrypt root certificate is expired and breaks installation of postgres-client
@ 2021-10-01 13:20 PG Bug reporting form <noreply@postgresql.org>
0 siblings, 1 reply; 2+ messages in thread
From: PG Bug reporting form @ 2021-10-01 13:20 UTC (permalink / raw)
To: pgsql-bugs@lists.postgresql.org; +Cc: andres.ehrenpreis@gmail.com
The following bug has been logged on the website:
Bug reference: 17210
Logged by: Andres Ehrenpreis
Email address: andres.ehrenpreis@gmail.com
PostgreSQL version: 11.12
Operating system: Ubuntu 16.04.7 LTS
Description:
When installing Postgres through Chef like this:
# PostgreSQL database client:
postgresql_client_install "Install PostgreSQL-client v11" do
version "11"
end
Then server-deployment fails with the error as follows:
[2021-10-01T12:06:52+00:00] ERROR: SSL Validation failure connecting to
host: download.postgresql.org - SSL_connect returned=1 errno=0 state=error:
certificate verify failed (certificate has expired)
Looks like download.postgresql.org cert-chain is broken.
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: BUG #17210: Postgres Let'sEncrypt root certificate is expired and breaks installation of postgres-client
@ 2021-10-01 13:50 Magnus Hagander <magnus@hagander.net>
parent: PG Bug reporting form <noreply@postgresql.org>
0 siblings, 0 replies; 2+ messages in thread
From: Magnus Hagander @ 2021-10-01 13:50 UTC (permalink / raw)
To: andres.ehrenpreis@gmail.com, PostgreSQL mailing lists <pgsql-bugs@lists.postgresql.org>
On Fri, Oct 1, 2021 at 3:36 PM PG Bug reporting form <noreply@postgresql.org>
wrote:
> The following bug has been logged on the website:
>
> Bug reference: 17210
> Logged by: Andres Ehrenpreis
> Email address: andres.ehrenpreis@gmail.com
> PostgreSQL version: 11.12
> Operating system: Ubuntu 16.04.7 LTS
> Description:
>
> When installing Postgres through Chef like this:
>
> # PostgreSQL database client:
> postgresql_client_install "Install PostgreSQL-client v11" do
> version "11"
> end
>
> Then server-deployment fails with the error as follows:
> [2021-10-01T12:06:52+00:00] ERROR: SSL Validation failure connecting to
> host: download.postgresql.org - SSL_connect returned=1 errno=0
> state=error:
> certificate verify failed (certificate has expired)
>
> Looks like download.postgresql.org cert-chain is broken.
>
Please don't cross-post the same question to multiple locations.
I will copy the response you already received, for anybody finding this in
the archives:
The certificate has not expired, but it is updated with the newer chain
from LetsEncrypt. This error is normally caused by your operating system
having a very old and unpatched version of OpenSSL on it. What operating
system and version are you running, and what's the version of your OpenSSL
packages?
I guess this one does include the operating system, being ubuntu 16.04. A
fully patched Ubuntu 16.04 should have no problem accessing the site using
the standard tools. So either your system is not fully patched, or Chef is
doing something differently, in which case you need to bring it up with
chef. (The standard install ways for PostgreSQL on Debian and Ubuntu does
not include the hostname download.postgresql.org anywhere)
--
Magnus Hagander
Me: https://www.hagander.net/ <http://www.hagander.net/;
Work: https://www.redpill-linpro.com/ <http://www.redpill-linpro.com/;
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2021-10-01 13:50 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2021-10-01 13:20 BUG #17210: Postgres Let'sEncrypt root certificate is expired and breaks installation of postgres-client PG Bug reporting form <noreply@postgresql.org>
2021-10-01 13:50 ` Magnus Hagander <magnus@hagander.net>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox