The following bug has been logged online:
Bug reference: 5008
Logged by: Jalaj Negi
Email address: jalajsinghnegi@gmail.com
PostgreSQL version: 8.4.0
Operating system: Windows XP with SP3
Description: Server Startup Problem - When server is configured for
SSL
Details:
I am running PostgreSQL version 8.4.0 on Windows XP machine with SP3. I
installed using Win32 Installer Package and the server runs as a service and
a service account was automatically created by the Win32 installer package
during server installation.
With default configuration the server was running fine and took minimal time
to start up (2-3 seconds). But when I configured server for SSL and
restarted server it took long time to start up (3-4 minutes) and displayed
the following startup message.
Startup Message
=====================================================
The PostgreSQL Server 8.4 service is
starting...................................
..
The PostgreSQL Server 8.4 service could not be started.
The service did not report an error.
More help is available by typing NET HELPMSG 3534.
The start command returned an error (2)
Press <return> to continue...
=====================================================
Exact Steps
=====================================================
1) Stopped the server.
2) Made following changes in configuration files for enabling SSL support.
In pg_hba.conf I have only following one entry -
hostssl all all 127.0.0.1/32 md5 clientcert=1
In postgresql.conf I made following changes -
ssl = on
ssl_ciphers = 'ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH'
Added server.crt, server.key, root.crt, root.crl in servers data directory.
3) Started the server.
=====================================================
Few Observations
=====================================================
1) When server starts with default configuration (without SSL configuration
changes) following process are created and running in system - pg_ctl.exe (1
instance), postgres.exe (6 instances).
2) When server starts with SSL configuration changes following process are
created and running in system - postgres.exe (6 instances). This time
pg_ctl.exe process is absent.
3) Server starts properly when "clientcert=1" is removed from pg_hba.conf
file. But if we want server to request client certificates we cant remove
clientcert parameter from pg_hba.conf file.
=====================================================
