Обсуждение: Connections Implementing SSL in 7.1 Dev

Поиск
Список
Период
Сортировка

Connections Implementing SSL in 7.1 Dev

От
Mark Kirkwood
Дата:
Hi all,

I downloaded the current ( 12 Aug ) development snapshot of the 7.1
development software.

It runs great ! - except I am having trouble with  the ssl enabled
connections...

I used  a certificate that I have generated via a mod_ssl  installation
to provide 2 files :

server.key
server.crt

in the $PGDATA directory. This enabled the postmaster to start ok.

Unfortunatly I cannot connect to the server usng psql ( or I suspect
anything else ). I get an error like :
"couldn't send SSL negotiation packet (not connected) ". This appears to
be coming from fe-connect.c.

Am I geting this because this fearture is not yet implemented, or am I
just being a plonker and not configured  ssl properly...( I wondered if
I needed a client certificate too...) ?

Anyway

Thanks for providing acecss at an interesting stage of your development

regards

Mark



RE: Connections Implementing SSL in 7.1 Dev

От
Magnus Hagander
Дата:
This is because I never updated the SSL support after I initially added it.
Somebody later added async support, and in the process broke SSL.
The machines I have running with SSL still runs 6.5+SSL-patch, so I haven't
had the time to fix it (yet).

I've said for a long time I hope to fix this soon, and haven't found the
time. BUt well, I still hope to fix it before 7.1 :-)

//Magnus

> -----Original Message-----
> From: Mark Kirkwood [mailto:markir@i4free.co.nz]
> Sent: den 17 augusti 2000 10:10
> To: pgsql-hackers@postgresql.org
> Subject: [HACKERS] Connections Implementing SSL in 7.1 Dev
> 
> 
> Hi all,
> 
> I downloaded the current ( 12 Aug ) development snapshot of the 7.1
> development software.
> 
> It runs great ! - except I am having trouble with  the ssl enabled
> connections...
> 
> I used  a certificate that I have generated via a mod_ssl  
> installation
> to provide 2 files :
> 
> server.key
> server.crt
> 
> in the $PGDATA directory. This enabled the postmaster to start ok.
> 
> Unfortunatly I cannot connect to the server usng psql ( or I suspect
> anything else ). I get an error like :
> "couldn't send SSL negotiation packet (not connected) ". This 
> appears to
> be coming from fe-connect.c.
> 
> Am I geting this because this fearture is not yet implemented, or am I
> just being a plonker and not configured  ssl properly...( I 
> wondered if
> I needed a client certificate too...) ?
> 
> Anyway
> 
> Thanks for providing acecss at an interesting stage of your 
> development
> 
> regards
> 
> Mark
>