Re: BUG #5008: Server Startup Problem - When server is configured for SSL - Mailing list pgsql-bugs

From Magnus Hagander
Subject Re: BUG #5008: Server Startup Problem - When server is configured for SSL
Date
Msg-id 9837222c0908260646o50a66076h35a36faaea9165e@mail.gmail.com
Whole thread Raw
In response to Re: BUG #5008: Server Startup Problem - When server is configured for SSL  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: BUG #5008: Server Startup Problem - When server is configured for SSL  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-bugs
On Wed, Aug 26, 2009 at 15:30, Tom Lane<tgl@sss.pgh.pa.us> wrote:
> Magnus Hagander <magnus@hagander.net> writes:
>> I think this indicates that pg_ctl is trying to connect to the
>> database just to see if it's running, but you have set it to require
>> SSL certificate on connections from localhost. Could that be so? If
>> so, try setting the requirement for certificates only on non-localhost
>> addresses and see if it starts up properly in that case.
>
> Hmm, seems like we should modify pg_ctl's probe code to set
> sslmode =3D disable. =A0Letting that default just provides an additional
> way to fail ...

Um. If we modify it, it should be to sslmode=3Dallow. Not "disable".
(*ahem* to what would be a reasonable defualt for libpq in general :P)

But that will still fail if the user has set it up to require a client
certificate.


--=20
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/

pgsql-bugs by date:

Previous
From: Tom Lane
Date:
Subject: Re: BUG #5011: Standby recovery unable to follow timeline change
Next
From: Tom Lane
Date:
Subject: Re: BUG #5008: Server Startup Problem - When server is configured for SSL