Thread: SSL

I think I have SSL working on the server.

but I have some nasty errors that tell me otherwise:


LOG:  could not load root certificate file "root.crt": No SSL error reported
DETAIL:  Will not verify client certificates.
LOG:  database system was shut down at 2006-11-09 17:37:20 EST
LOG:  checkpoint record is at 0/A7972E80
LOG:  redo record is at 0/A7972E80; undo record is at 0/0; shutdown TRUE
LOG:  next transaction ID: 1720419; next OID: 39576
LOG:  next MultiXactId: 59; next MultiXactOffset: 117
LOG:  database system is ready
LOG:  transaction ID wrap limit is 2147484146, limited by database "postgres"
LOG:  autovacuum: processing database "dbmail"
LOG:  incomplete startup packet
FATAL:  password authentication failed for user "postgres"
FATAL:  password authentication failed for user "postgres"
FATAL:  no pg_hba.conf entry for host "192.168.1.10", user "dbmail", database
"dbmail", SSL on
FATAL:  no pg_hba.conf entry for host "192.168.1.10", user "dbmail", database
"dbmail", SSL off


listen_address = '*'
ssl = true

And pg_hba has a line (one of several):
hostssl all         all         192.168.1.0/32        md5

I did all the SSL cert stuff from the website and put my server certification
with all the others.
Problem is I don't think I'm supposed to get auth failures for postgres either.

Tom Allison <tallison@tacocat.net> writes:
> And pg_hba has a line (one of several):
> hostssl all         all         192.168.1.0/32        md5

I imagine you want that to be /24 ... certainly /32 is wrong.

            regards, tom lane