Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1krchi-0003ub-5B for pgsql-general@arkaria.postgresql.org; Tue, 22 Dec 2020 08:07:35 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1krchg-0006NN-MA for pgsql-general@arkaria.postgresql.org; Tue, 22 Dec 2020 08:07:32 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1krchg-0006NG-A9 for pgsql-general@lists.postgresql.org; Tue, 22 Dec 2020 08:07:32 +0000 Received: from smtpout2.smhi.se ([2001:67c:274:5501::39]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1krchY-0007Ky-He for pgsql-general@postgresql.org; Tue, 22 Dec 2020 08:07:30 +0000 Received: from winserv743.ad.smhi.se (winserv743.ad.smhi.se [172.16.6.38]) by smtpout2.smhi.se (Postfix) with ESMTPS id 1440110A7EE8; Tue, 22 Dec 2020 08:07:18 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smhi.se; s=20180112; t=1608624438; bh=SVWBVneflVVdGXv2EgF1kjtPoznLrYVmfbq5epCu+Q4=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=RP0C+bHZFbPz1MU6pWCwM5Fz+xvaj8qC+tw/Dj5vwQR9WApDNWNxQIXW3Dj+nE0y+ YNSQgrp5+0eKhEDN/55ATDg2D/Te/um97jfbWR6FYA/vq21c+m5wRXFko0YfBQHyHc nTrmr83IUTupqqQW/x9HXkNkyBP+Ugzo1V9JlK70= Received: from winserv744.ad.smhi.se (172.16.6.35) by winserv743.ad.smhi.se (172.16.6.38) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2106.2; Tue, 22 Dec 2020 09:07:17 +0100 Received: from winserv744.ad.smhi.se ([fe80::c19c:d0f0:5830:a72b]) by winserv744.ad.smhi.se ([fe80::c19c:d0f0:5830:a72b%9]) with mapi id 15.01.2106.006; Tue, 22 Dec 2020 09:07:17 +0100 From: Gustavsson Mikael To: Tom Lane CC: Magnus Hagander , Kyotaro Horiguchi , "pgsql-general@postgresql.org" , Svensson Peter Subject: SV: SV: SV: SV: Problem with ssl and psql in Postgresql 13 Thread-Topic: SV: SV: SV: Problem with ssl and psql in Postgresql 13 Thread-Index: AQHW1ER+dWnFD/e9/0CWjk1hYinUxan65DcAgAAT2weAAE4KgIAAEwPs///2LoCAAB6Q7f//9RsAgAAS+1X///M6gAACMBNMACAAxLAAF7C+AACx1Ea8 Date: Tue, 22 Dec 2020 08:07:17 +0000 Message-ID: References: <20201217.172938.170511532557914014.horikyota.ntt@gmail.com> <06191eae74d045e192a786a84a73ba53@smhi.se> <65644.1608214801@sss.pgh.pa.us> , <698125e1105644adaa27578bb37b18f6@smhi.se>,<89909.1608222331@sss.pgh.pa.us>,<61e2a65bbc2f47d297a6f3cdac2cc6cc@smhi.se> ,<169637.1608321770@sss.pgh.pa.us> In-Reply-To: <169637.1608321770@sss.pgh.pa.us> Accept-Language: sv-SE, en-US Content-Language: sv-SE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.122.0.145] Content-Type: multipart/alternative; boundary="_000_c347c62b507743ceac0aaebd0ccff533smhise_" MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --_000_c347c62b507743ceac0aaebd0ccff533smhise_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, Yes it=B4s odd. I think we begin with download/reinstall and take it from t= here. The server name is just letters and numbers so I think we can rule that out= . Christmas is coming up fast as usual so I think I will pick this up in Janu= ary. Thanks for all the help and Happy Christmas! Or God Jul as we say in Sweden= . KR Mikael Gustavsson, SMHI ________________________________ Fr=E5n: Tom Lane Skickat: den 18 december 2020 21:02:50 Till: Gustavsson Mikael Kopia: Magnus Hagander; Kyotaro Horiguchi; pgsql-general@postgresql.org; Sv= ensson Peter =C4mne: Re: SV: SV: SV: Problem with ssl and psql in Postgresql 13 Gustavsson Mikael writes: > pgsql-13 with require: > $ /usr/pgsql-13/bin/psql "dbname=3Dpostgres user=3Dkalle host=3Dserver ss= lmode=3Drequire" > Password for user kalle: > psql (13.1) > Type "help" for help. That is just bizarre. libpq should not ignore the sslmode=3Drequire option like that, unless it thinks it's making a Unix-socket connection, which it should not think given the host specification. (There's not a slash in your server's real name, is there? But if there was, v11 should misbehave too.) It seems like there must be some environment setting, or maybe a service file, changing the behavior from what it should be on its face. But that theory has big flaws too: an explicit sslmode=3Drequire setting should not be overridable from environment, and even if it was, why wouldn't v11 act the same? The only other conclusion I can think of is that your copy of libpq.so is broken. Maybe you should try redownloading/reinstalling v13. regards, tom lane --_000_c347c62b507743ceac0aaebd0ccff533smhise_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi, 


Yes it=B4s odd. I think we begin with download/reinstall and take i= t from there.

The server name is just letters and numbers so I think we can rule = that out. 


Christmas is coming up fast as usual so I think I will pick this up in J= anuary.

Thanks for all the help and Happy Christmas! Or God Jul as we say in Swe= den.


KR 

Mikael Gustavsson, SMHI

Fr=E5n: Tom Lane <tgl@= sss.pgh.pa.us>
Skickat: den 18 december 2020 21:02:50
Till: Gustavsson Mikael
Kopia: Magnus Hagander; Kyotaro Horiguchi; pgsql-general@postgresql.= org; Svensson Peter
=C4mne: Re: SV: SV: SV: Problem with ssl and psql in Postgresql 13
 
Gustavsson Mikael <mikael.gustavsson@smhi.se>= ; writes:
> pgsql-13 with require:
> $ /usr/pgsql-13/bin/psql "dbname=3Dpostgres user=3Dkalle host=3Ds= erver sslmode=3Drequire"
> Password for user kalle:
> psql (13.1)
> Type "help" for help.

That is just bizarre.  libpq should not ignore the sslmode=3Drequire o= ption
like that, unless it thinks it's making a Unix-socket connection, which
it should not think given the host specification.  (There's not a slas= h
in your server's real name, is there?  But if there was, v11 should misbehave too.)

It seems like there must be some environment setting, or maybe a service file, changing the behavior from what it should be on its face.  But that theory has big flaws too: an explicit sslmode=3Drequire setting should=
not be overridable from environment, and even if it was, why wouldn't v11 act the same?

The only other conclusion I can think of is that your copy of libpq.so
is broken.  Maybe you should try redownloading/reinstalling v13.

            &nb= sp;           regards, to= m lane


 --_000_c347c62b507743ceac0aaebd0ccff533smhise_--