Re: SSL cert "not initialized" error with logical replication with 13.11 - Mailing list pgsql-admin

From Tom Lane
Subject Re: SSL cert "not initialized" error with logical replication with 13.11
Date
Msg-id 3757321.1687355602@sss.pgh.pa.us
Whole thread Raw
In response to SSL cert "not initialized" error with logical replication with 13.11  (Axel Rau <Axel.Rau@chaos1.de>)
Responses Re: SSL cert "not initialized" error with logical replication with 13.11
List pgsql-admin
Axel Rau <Axel.Rau@chaos1.de> writes:
> After upgrading to 13.11, Publisher no longer accepts cert of subscriber.

The error is pretty clear:

> RROR,XX000,"could not connect to the publisher: SSL error: sslv3 alert certificate expired",,,,,,,,,"","logical
replicationworker" 

> Servercert:
>             Not Before: Aug 18 09:12:35 2022 GMT
>             Not After : Aug 29 09:12:35 2023 GMT

How sure are you that that cert is the one the publisher is using?
Also, maybe the complaint is about a cert being used by the subscriber,
not the publisher?  I don't think this error message would distinguish
that.

            regards, tom lane



pgsql-admin by date:

Previous
From: Sean O'Grady
Date:
Subject: Re: Question about wal_compression and what to expect
Next
From: Scott Ribe
Date:
Subject: Re: Question about wal_compression and what to expect