public inbox for [email protected]
help / color / mirror / Atom feedFrom: Joan Frey <[email protected]>
To: Matthias Apitz <[email protected]>
Cc: [email protected]
Subject: Re: PostgreSQL server with SSL
Date: Wed, 24 Jun 2026 14:09:48 +0200
Message-ID: <CANf+CVCAN9k-y1+jg3dG4e_nJOPCctGP9BnZJ=qWr_-Egi-XAw@mail.gmail.com> (raw)
In-Reply-To: <aju2BmB8xKZFBCol@pureos>
References: <ajjOl3NzXlWyNJFG@c720-1400094>
<ajpgY05T35CcR2ac@pureos>
<CANf+CVBusm7iS-wahkK5sF_hK=ON+xhOqtVsYO81NmJ_3M9GQQ@mail.gmail.com>
<ajp1SDnYEXU//Ddy@pureos>
<CANf+CVAJvgj8Y9yBGxaNzcFr9Ev_KVHgUBNRXJ7eO6KgR7KGqQ@mail.gmail.com>
<aju2BmB8xKZFBCol@pureos>
👍
Joan Frey a réagi depuis Gmail
<https://www.google.com/gmail/about/?utm_source=gmail-in-product&utm_medium=et&utm_campaign=e...;
Le mer. 24 juin 2026 à 12:48, Matthias Apitz <[email protected]> a écrit :
> El día martes, junio 23, 2026 a las 02:25:00 +0200, Joan Frey escribió:
>
> > I could only find this error message related to an error with the openssl
> > version.
> > This issue was apparently patched with pg15.6 (
> > https://www.postgresql.org/docs/release/15.6/)
> >
> > I suggest that you update to the latest minor version and retry.
>
> Thanks for your helping hand, Joan.
>
> I've setup in a podman container a 18.3 PostgreSQL cluster and with this
> SSL works locally and via network. Details are below for documentation
> purpose.
>
> Thanks again!
>
> matthias
>
> SSL version:
>
> c169ecb37a76:# /usr/local/sisis-pap/bin/openssl -v
> OpenSSL 3.5.7 9 Jun 2026 (Library: OpenSSL 3.5.7 9 Jun 2026)
>
>
> /data/postgresql183/data/postgresql.conf
>
> ssl = on
> ssl_cert_file = '/home/postgres/ca/pg-server.crt'
> ssl_key_file = '/home/postgres/ca/pg-passless-server.key'
> ssl_ca_file = '/home/postgres/ca/demoCA/cacert.pem'
>
> /data/postgresql183/data/pg_hba.conf
>
> # IPv4 local connections:
> hostssl all all 127.0.0.1/32 password
> hostssl all all 10.0.2.100/32 password
>
>
> podman container 'localhost':
>
> c169ecb37a76:# export PGHOST=localhost
> c169ecb37a76:# export PGPORT=5432
> c169ecb37a76:# /usr/local/sisis-pap/pgsql-18.3/bin/psql -U sisis
> Password for user sisis:
> psql (18.3)
> SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384,
> compression: off, ALPN: postgresql)
> Type "help" for help.
>
> sisis=#
>
> via network from my MacBook:
>
> $ export PGHOST=srap57dxr1.dev.xxxx.org
> $ export PGPORT=61443
> $ psql -U sisis
> Password for user sisis:
> psql (14.15 (Homebrew), server 18.3)
> WARNING: psql major version 14, server major version 18.
> Some psql features might not work.
> SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, bits:
> 256, compression: off)
> Type "help" for help.
>
> sisis=#
>
> The port 61443 sounds unusual, but has todo with the network connectos
> exposed by the podman container.
>
> --
> Matthias Apitz, ✉ [email protected], http://www.unixarea.de/
> +49-176-38902045
> Public GnuPG key: http://www.unixarea.de/key.pub
>
view thread (7+ messages)
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected]
Subject: Re: PostgreSQL server with SSL
In-Reply-To: <CANf+CVCAN9k-y1+jg3dG4e_nJOPCctGP9BnZJ=qWr_-Egi-XAw@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox