Connections Implementing SSL in 7.1 Dev
Hi all,
I downloaded the current ( 12 Aug ) development snapshot of the 7.1
development software.
It runs great ! - except I am having trouble with the ssl enabled
connections...
I used a certificate that I have generated via a mod_ssl installation
to provide 2 files :
server.key
server.crt
in the $PGDATA directory. This enabled the postmaster to start ok.
Unfortunatly I cannot connect to the server usng psql ( or I suspect
anything else ). I get an error like :
"couldn't send SSL negotiation packet (not connected) ". This appears to
be coming from fe-connect.c.
Am I geting this because this fearture is not yet implemented, or am I
just being a plonker and not configured ssl properly...( I wondered if
I needed a client certificate too...) ?
Anyway
Thanks for providing acecss at an interesting stage of your development
regards
Mark
This is because I never updated the SSL support after I initially added it.
Somebody later added async support, and in the process broke SSL.
The machines I have running with SSL still runs 6.5+SSL-patch, so I haven't
had the time to fix it (yet).
I've said for a long time I hope to fix this soon, and haven't found the
time. BUt well, I still hope to fix it before 7.1 :-)
//Magnus
Show quoted text
-----Original Message-----
From: Mark Kirkwood [mailto:markir@i4free.co.nz]
Sent: den 17 augusti 2000 10:10
To: pgsql-hackers@postgresql.org
Subject: [HACKERS] Connections Implementing SSL in 7.1 DevHi all,
I downloaded the current ( 12 Aug ) development snapshot of the 7.1
development software.It runs great ! - except I am having trouble with the ssl enabled
connections...I used a certificate that I have generated via a mod_ssl
installation
to provide 2 files :server.key
server.crtin the $PGDATA directory. This enabled the postmaster to start ok.
Unfortunatly I cannot connect to the server usng psql ( or I suspect
anything else ). I get an error like :
"couldn't send SSL negotiation packet (not connected) ". This
appears to
be coming from fe-connect.c.Am I geting this because this fearture is not yet implemented, or am I
just being a plonker and not configured ssl properly...( I
wondered if
I needed a client certificate too...) ?Anyway
Thanks for providing acecss at an interesting stage of your
developmentregards
Mark
Import Notes
Resolved by subject fallback