MIME-Version: 1.0
References: <ajjOl3NzXlWyNJFG@c720-1400094> <ajpgY05T35CcR2ac@pureos>
 <CANf+CVBusm7iS-wahkK5sF_hK=ON+xhOqtVsYO81NmJ_3M9GQQ@mail.gmail.com>
 <ajp1SDnYEXU//Ddy@pureos>
 <CANf+CVAJvgj8Y9yBGxaNzcFr9Ev_KVHgUBNRXJ7eO6KgR7KGqQ@mail.gmail.com>
 <aju2BmB8xKZFBCol@pureos>
In-Reply-To: <aju2BmB8xKZFBCol@pureos>
From: Joan Frey <joan.frey68@gmail.com>
Date: Wed, 24 Jun 2026 14:09:48 +0200
Message-ID: 
 <CANf+CVCAN9k-y1+jg3dG4e_nJOPCctGP9BnZJ=qWr_-Egi-XAw@mail.gmail.com>
Subject: Re: PostgreSQL server with SSL
To: Matthias Apitz <guru@unixarea.de>
Cc: pgsql-general@lists.postgresql.org
Content-Type: multipart/alternative; boundary="0000000000004c8c340654fec127"
Archived-At: 
 <https://www.postgresql.org/message-id/CANf%2BCVCAN9k-y1%2Bjg3dG4e_nJOPCctGP9BnZJ%3DqWr_-Egi-XAw%40mail.gmail.com>
Precedence: bulk

--0000000000004c8c340654fec127
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

=F0=9F=91=8D

Joan Frey a r=C3=A9agi depuis Gmail
<https://www.google.com/gmail/about/?utm_source=3Dgmail-in-product&utm_medi=
um=3Det&utm_campaign=3Demojireactionemail#app>

Le mer. 24 juin 2026 =C3=A0 12:48, Matthias Apitz <guru@unixarea.de> a =C3=
=A9crit :

> El d=C3=ADa martes, junio 23, 2026 a las 02:25:00 +0200, Joan Frey escrib=
i=C3=B3:
>
> > I could only find this error message related to an error with the opens=
sl
> > version.
> > This issue was apparently patched with pg15.6 (
> > https://www.postgresql.org/docs/release/15.6/)
> >
> > I suggest that you update to the latest minor version and retry.
>
> Thanks for your helping hand, Joan.
>
> I've setup in a podman container a 18.3 PostgreSQL cluster and with this
> SSL works locally and via network. Details are below for documentation
> purpose.
>
> Thanks again!
>
>         matthias
>
> SSL version:
>
> c169ecb37a76:# /usr/local/sisis-pap/bin/openssl -v
> OpenSSL 3.5.7 9 Jun 2026 (Library: OpenSSL 3.5.7 9 Jun 2026)
>
>
> /data/postgresql183/data/postgresql.conf
>
> ssl =3D on
> ssl_cert_file =3D '/home/postgres/ca/pg-server.crt'
> ssl_key_file =3D '/home/postgres/ca/pg-passless-server.key'
> ssl_ca_file =3D '/home/postgres/ca/demoCA/cacert.pem'
>
> /data/postgresql183/data/pg_hba.conf
>
> # IPv4 local connections:
> hostssl    all             all             127.0.0.1/32         password
> hostssl    all             all             10.0.2.100/32        password
>
>
> podman container 'localhost':
>
> c169ecb37a76:# export PGHOST=3Dlocalhost
> c169ecb37a76:# export PGPORT=3D5432
> c169ecb37a76:# /usr/local/sisis-pap/pgsql-18.3/bin/psql -U sisis
> Password for user sisis:
> psql (18.3)
> SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384,
> compression: off, ALPN: postgresql)
> Type "help" for help.
>
> sisis=3D#
>
> via network from my MacBook:
>
> $ export PGHOST=3Dsrap57dxr1.dev.xxxx.org
> $ export PGPORT=3D61443
> $ psql -U sisis
> Password for user sisis:
> psql (14.15 (Homebrew), server 18.3)
> WARNING: psql major version 14, server major version 18.
>          Some psql features might not work.
> SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, bits:
> 256, compression: off)
> Type "help" for help.
>
> sisis=3D#
>
> The port 61443 sounds unusual, but has todo with the network connectos
> exposed by the podman container.
>
> --
> Matthias Apitz, =E2=9C=89 guru@unixarea.de, http://www.unixarea.de/
> +49-176-38902045
> Public GnuPG key: http://www.unixarea.de/key.pub
>

--0000000000004c8c340654fec127
Content-Type: text/vnd.google.email-reaction+json; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

{
  "emoji": "=F0=9F=91=8D",
  "version": 1
}
--0000000000004c8c340654fec127
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div><p style=3D"font-size:50px;margin-top:0;margin-bottom:0">=F0=9F=91=8D<=
/p><p style=3D"margin-top:10px;margin-bottom:0">Joan Frey a r=C3=A9agi depu=
is <a href=3D"https://www.google.com/gmail/about/?utm_source=3Dgmail-in-pro=
duct&amp;utm_medium=3Det&amp;utm_campaign=3Demojireactionemail#app">Gmail</=
a></p></div><br><div class=3D"gmail_quote gmail_quote_container"><div dir=
=3D"ltr" class=3D"gmail_attr">Le=C2=A0mer. 24 juin 2026 =C3=A0=C2=A012:48, =
Matthias Apitz &lt;<a href=3D"mailto:guru@unixarea.de">guru@unixarea.de</a>=
&gt; a =C3=A9crit=C2=A0:<br></div><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">El d=C3=
=ADa martes, junio 23, 2026 a las 02:25:00 +0200, Joan Frey escribi=C3=B3:<=
br>
<br>
&gt; I could only find this error message related to an error with the open=
ssl<br>
&gt; version.<br>
&gt; This issue was apparently patched with pg15.6 (<br>
&gt; <a href=3D"https://www.postgresql.org/docs/release/15.6/" rel=3D"noref=
errer" target=3D"_blank">https://www.postgresql.org/docs/release/15.6/</a>)=
<br>
&gt; <br>
&gt; I suggest that you update to the latest minor version and retry.<br>
<br>
Thanks for your helping hand, Joan.<br>
<br>
I&#39;ve setup in a podman container a 18.3 PostgreSQL cluster and with thi=
s<br>
SSL works locally and via network. Details are below for documentation<br>
purpose.<br>
<br>
Thanks again!<br>
<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 matthias<br>
<br>
SSL version:<br>
<br>
c169ecb37a76:# /usr/local/sisis-pap/bin/openssl -v<br>
OpenSSL 3.5.7 9 Jun 2026 (Library: OpenSSL 3.5.7 9 Jun 2026)<br>
<br>
<br>
/data/postgresql183/data/postgresql.conf<br>
<br>
ssl =3D on<br>
ssl_cert_file =3D &#39;/home/postgres/ca/pg-server.crt&#39;<br>
ssl_key_file =3D &#39;/home/postgres/ca/pg-passless-server.key&#39;<br>
ssl_ca_file =3D &#39;/home/postgres/ca/demoCA/cacert.pem&#39;<br>
<br>
/data/postgresql183/data/pg_hba.conf<br>
<br>
# IPv4 local connections:<br>
hostssl=C2=A0 =C2=A0 all=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0all=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"http://127.0.0.1=
/32" rel=3D"noreferrer" target=3D"_blank">127.0.0.1/32</a>=C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0password<br>
hostssl=C2=A0 =C2=A0 all=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0all=
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"http://10.0.2.10=
0/32" rel=3D"noreferrer" target=3D"_blank">10.0.2.100/32</a>=C2=A0 =C2=A0 =
=C2=A0 =C2=A0 password<br>
<br>
<br>
podman container &#39;localhost&#39;:<br>
<br>
c169ecb37a76:# export PGHOST=3Dlocalhost<br>
c169ecb37a76:# export PGPORT=3D5432<br>
c169ecb37a76:# /usr/local/sisis-pap/pgsql-18.3/bin/psql -U sisis<br>
Password for user sisis:<br>
psql (18.3)<br>
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, compress=
ion: off, ALPN: postgresql)<br>
Type &quot;help&quot; for help.<br>
<br>
sisis=3D#<br>
<br>
via network from my MacBook:<br>
<br>
$ export PGHOST=3D<a href=3D"http://srap57dxr1.dev.xxxx.org" rel=3D"norefer=
rer" target=3D"_blank">srap57dxr1.dev.xxxx.org</a><br>
$ export PGPORT=3D61443<br>
$ psql -U sisis<br>
Password for user sisis:<br>
psql (14.15 (Homebrew), server 18.3)<br>
WARNING: psql major version 14, server major version 18.<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Some psql features might not work.<br>
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, bits: 25=
6, compression: off)<br>
Type &quot;help&quot; for help.<br>
<br>
sisis=3D#<br>
<br>
The port 61443 sounds unusual, but has todo with the network connectos<br>
exposed by the podman container.<br>
<br>
-- <br>
Matthias Apitz, =E2=9C=89 <a href=3D"mailto:guru@unixarea.de" target=3D"_bl=
ank">guru@unixarea.de</a>, <a href=3D"http://www.unixarea.de/" rel=3D"noref=
errer" target=3D"_blank">http://www.unixarea.de/</a> +49-176-38902045<br>
Public GnuPG key: <a href=3D"http://www.unixarea.de/key.pub" rel=3D"norefer=
rer" target=3D"_blank">http://www.unixarea.de/key.pub</a><br>
</blockquote></div>

--0000000000004c8c340654fec127--