Re: SV: Problem with ssl and psql in Postgresql 13

2020-12-29 Thread Tom Lane
Svensson Peter writes: > Yes, libpq patch solved our problem. Thanks for confirming! I've pushed that patch and the server-side fixes, so it'll be in February's releases. regards, tom lane

SV: Problem with ssl and psql in Postgresql 13

2020-12-29 Thread Svensson Peter
Hi, Yes, libpq patch solved our problem. Before patch: psql -h myserver -U myuser -d postgres psql: error: FATAL: no pg_hba.conf entry for host "ip", user "myuser", database "postgres", SSL off FATAL: no pg_hba.conf entry for host "ip", user "myuser", database "postgres", SSL off With patch

Re: SV: SV: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-23 Thread Tom Lane
I wrote: > Gustavsson Mikael writes: >> So if i set gssencmode=disable on my pgsql-13 to postgres 13 server >> connection i get an SSL connection. > It looks like, if there is a credentials cache and gssencmode isn't > explicitly disabled, we try GSS first. If the server refuses that: > ... > t

Re: SV: SV: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-23 Thread Tom Lane
Gustavsson Mikael writes: > I did a final test before logging out for Christmas because i found a thread > in hackers discussing some issue with GSS and SSL. > So if i set gssencmode=disable on my pgsql-13 to postgres 13 server > connection i get an SSL connection. Oooh ... that's the missing i

SV: SV: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-23 Thread Gustavsson Mikael
__ Från: externaly-forwar...@smhi.se för Gustavsson Mikael Skickat: den 22 december 2020 09:07:17 Till: Tom Lane Kopia: Magnus Hagander; Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson Peter Ämne: SV: SV: SV: SV: Problem with ssl and psql in Postgresql 13 Hi, Yes it´

SV: SV: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-22 Thread Gustavsson Mikael
Jul as we say in Sweden. KR Mikael Gustavsson, SMHI Från: Tom Lane Skickat: den 18 december 2020 21:02:50 Till: Gustavsson Mikael Kopia: Magnus Hagander; Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson Peter Ämne: Re: SV: SV: SV: Problem with ssl and

Re: SV: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-18 Thread Tom Lane
Gustavsson Mikael writes: > pgsql-13 with require: > $ /usr/pgsql-13/bin/psql "dbname=postgres user=kalle host=server > sslmode=require" > Password for user kalle: > psql (13.1) > Type "help" for help. That is just bizarre. libpq should not ignore the sslmode=require option like that, unless it

SV: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-18 Thread Gustavsson Mikael
för Gustavsson Mikael Skickat: den 17 december 2020 17:33:13 Till: Tom Lane Kopia: Magnus Hagander; Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson Peter Ämne: SV: SV: SV: Problem with ssl and psql in Postgresql 13 Here is the result. ldd /usr/pgsql-13/bin/psql linux-vdso.so.1 (

SV: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Gustavsson Mikael
___ Från: Tom Lane Skickat: den 17 december 2020 17:25:31 Till: Gustavsson Mikael Kopia: Magnus Hagander; Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson Peter Ämne: Re: SV: SV: Problem with ssl and psql in Postgresql 13 Gustavsson Mikael writes: > $ /usr/pgsql-13/bin/ps

Re: SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Tom Lane
Gustavsson Mikael writes: > $ /usr/pgsql-13/bin/psql "dbname=postgres user=kalle host=server > sslmode=require" > psql: error: FATAL: no pg_hba.conf entry for host "nn.nnn.n.nnn", user > "kalle", database "postgres", SSL off > FATAL: no pg_hba.conf entry for host "nn.nnn.n.nnn", user "kalle",

SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Gustavsson Mikael
off > > KR Mikael Gustavsson, SMHI > > > ____________ > Från: Magnus Hagander > Skickat: den 17 december 2020 15:52:55 > Till: Gustavsson Mikael > Kopia: Tom Lane; Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson > Peter > Ämne: Re: SV: Probl

Re: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Magnus Hagander
_ > Från: Magnus Hagander > Skickat: den 17 december 2020 15:52:55 > Till: Gustavsson Mikael > Kopia: Tom Lane; Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson > Peter > Ämne: Re: SV: Problem with ssl and psql in Postgresql 13 > > On Thu, Dec 17, 2020 a

SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Gustavsson Mikael
5 Till: Gustavsson Mikael Kopia: Tom Lane; Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson Peter Ämne: Re: SV: Problem with ssl and psql in Postgresql 13 On Thu, Dec 17, 2020 at 3:36 PM Gustavsson Mikael wrote: > > > Hi, > > log_connections is on. The ERR message is correct

Re: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Magnus Hagander
On Thu, Dec 17, 2020 at 3:36 PM Gustavsson Mikael wrote: > > > Hi, > > log_connections is on. The ERR message is correct, we do not have an entry > for SSL off. > The question is why psql(13) is trying to connect without ssl? > > 2020-12-17T14:25:09.565566+00:00 server INFO [30-1] pgpid=2422778

SV: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Gustavsson Mikael
gres", SSL off KR Mikael Gustavsson, SMHI Från: Tom Lane Skickat: den 17 december 2020 15:20:01 Till: Gustavsson Mikael Kopia: Kyotaro Horiguchi; pgsql-gene...@postgresql.org; Svensson Peter Ämne: Re: SV: Problem with ssl and psql in Postgresql 13 Gustavsson Mikael

Re: SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Tom Lane
Gustavsson Mikael writes: > Clarification, its the same postgresql13 server. I just connect with > different psql-clients. Perhaps turning on log_connections on the server would offer some insight. It sort of looks like the v13 client is trying to connect with SSL, failing for some unknown reas

SV: Problem with ssl and psql in Postgresql 13

2020-12-17 Thread Gustavsson Mikael
Hi, SSL is on. grep ssl /etc/postgresql/13/postgresql.conf ssl = 'on' ssl_cert_file = '/etc/pki/private/xxx_incl_key.pem' ssl_key_file = '/etc/pki/private/xxx.key' Clarification, its the same postgresql13 server. I just connect with different psql-clients. KR ___