Date: Wed, 24 Jun 2026 12:48:38 +0200
From: Matthias Apitz <guru@unixarea.de>
To: Joan Frey <joan.frey68@gmail.com>
Cc: pgsql-general@lists.postgresql.org
Subject: Re: PostgreSQL server with SSL
Message-ID: <aju2BmB8xKZFBCol@pureos>
Reply-To: Matthias Apitz <guru@unixarea.de>
References: <ajjOl3NzXlWyNJFG@c720-1400094>
 <ajpgY05T35CcR2ac@pureos>
 <CANf+CVBusm7iS-wahkK5sF_hK=ON+xhOqtVsYO81NmJ_3M9GQQ@mail.gmail.com>
 <ajp1SDnYEXU//Ddy@pureos>
 <CANf+CVAJvgj8Y9yBGxaNzcFr9Ev_KVHgUBNRXJ7eO6KgR7KGqQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: 
 <CANf+CVAJvgj8Y9yBGxaNzcFr9Ev_KVHgUBNRXJ7eO6KgR7KGqQ@mail.gmail.com>
Archived-At: <https://www.postgresql.org/message-id/aju2BmB8xKZFBCol%40pureos>
Precedence: bulk

El día martes, junio 23, 2026 a las 02:25:00 +0200, Joan Frey escribió:

> I could only find this error message related to an error with the openssl
> version.
> This issue was apparently patched with pg15.6 (
> https://www.postgresql.org/docs/release/15.6/)
> 
> I suggest that you update to the latest minor version and retry.

Thanks for your helping hand, Joan.

I've setup in a podman container a 18.3 PostgreSQL cluster and with this
SSL works locally and via network. Details are below for documentation
purpose.

Thanks again!

	matthias

SSL version:

c169ecb37a76:# /usr/local/sisis-pap/bin/openssl -v
OpenSSL 3.5.7 9 Jun 2026 (Library: OpenSSL 3.5.7 9 Jun 2026)


/data/postgresql183/data/postgresql.conf

ssl = on
ssl_cert_file = '/home/postgres/ca/pg-server.crt'
ssl_key_file = '/home/postgres/ca/pg-passless-server.key'
ssl_ca_file = '/home/postgres/ca/demoCA/cacert.pem'

/data/postgresql183/data/pg_hba.conf

# IPv4 local connections:
hostssl    all             all             127.0.0.1/32         password
hostssl    all             all             10.0.2.100/32        password


podman container 'localhost':

c169ecb37a76:# export PGHOST=localhost
c169ecb37a76:# export PGPORT=5432
c169ecb37a76:# /usr/local/sisis-pap/pgsql-18.3/bin/psql -U sisis
Password for user sisis:
psql (18.3)
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, compression: off, ALPN: postgresql)
Type "help" for help.

sisis=#

via network from my MacBook:

$ export PGHOST=srap57dxr1.dev.xxxx.org
$ export PGPORT=61443
$ psql -U sisis
Password for user sisis:
psql (14.15 (Homebrew), server 18.3)
WARNING: psql major version 14, server major version 18.
         Some psql features might not work.
SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, bits: 256, compression: off)
Type "help" for help.

sisis=#

The port 61443 sounds unusual, but has todo with the network connectos
exposed by the podman container.

-- 
Matthias Apitz, ✉ guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045
Public GnuPG key: http://www.unixarea.de/key.pub