Re: SSL connectivity issue from PGAdmin to Google Cloud SQL - Mailing list pgadmin-support

From Yogesh Mahajan
Subject Re: SSL connectivity issue from PGAdmin to Google Cloud SQL
Date
Msg-id CAMa=N=OmNuXHMziR3Wt85qvcgjrnLG_voQrFkYGP7hL-BGvZDQ@mail.gmail.com
Whole thread Raw
In response to SSL connectivity issue from PGAdmin to Google Cloud SQL  (Prashanth Golla <prashanth@modiface.com>)
List pgadmin-support
Hi,

Can you please try to connect PostgreSQL(Google cloud sql) using a terminal with psql utility where you can provide ssl certificates in psql command to connect?


Thanks,
Yogesh Mahajan
EnterpriseDB


On Fri, May 24, 2024 at 8:10 PM Prashanth Golla <prashanth@modiface.com> wrote:
Hi Yogesh,

Thanks for the reply. Since, we have hosted pgadmin on cloud run, which is serverless we cannot use terminal to connect. 
We have an application hosted on cloud run using the same database and are able to successfully connect when we enable ssl.
Note - We are using Google cloud SQL certificates which are managed by GCP.
Do you have any other steps I need to look into?

Thanks,
Prashanth Golla

On Fri, May 24, 2024 at 12:03 AM Yogesh Mahajan <yogesh.mahajan@enterprisedb.com> wrote:
Hi,

Error indicates the issue is with ssl certificates itself.
Can you please try connecting via terminal using these certificates?

Thanks,
Yogesh Mahajan
EnterpriseDB


On Thu, May 23, 2024 at 6:46 PM Prashanth Golla <prashanth@modiface.com> wrote:
Hi Support team,

We have hosted PGAdmin on Google cloud run and are able to successfully connect to google cloud sql server. We are enforcing ssl connection on google cloud sql for which we copied the ssl certs to pgadmin(1. using volume mounts on cloud run, 2. Added a simple Dockerfile to copy certs) and then we used ssl parameters from PGAdmin console and specified the respective paths for client cert, client key and server cert. 

We get the following error when we select SSL mode as verify-full

image.png


The following error when we choose SSL mode as require or verify-ca

image.png

Note: We tried both copying the certs to custom path i.e. /var/lib/pgadmin/certs and also the default path /var/lib/pgadmin/.postgresql/, neither of them works and we cannot update the path for client certs from pgadmin console

Could you please take a look and help us to troubleshoot?

Thanks,
Prashanth Golla
Attachment

pgadmin-support by date:

Previous
From: Yogesh Mahajan
Date:
Subject: Re: SSL connectivity issue from PGAdmin to Google Cloud SQL
Next
From: Akshay Joshi
Date:
Subject: pgAdmin 4 v8.7 Released