Thread: issues connecting to RDS from psql 9.2 v 14.2

issues connecting to RDS from psql 9.2 v 14.2

From
"Capobianco, Tony"
Date:

Our RHEL 7.9 installation comes with PostgreSQL 9.2 installed which I know has been desupported.  We installed 14.2 in a non-default location and observe this unusual behavior:

 

[postgres@servername ~]$ psql -h RDS-instance.rds.amazonaws.com -p 5432 -d dbname -U root

Password for user root:

psql (9.2.24, server 12.8)

WARNING: psql version 9.2, server version 12.0.

         Some psql features might not work.

SSL connection (cipher: cipher text here, bits: 256)

Type "help" for help.

 

daldb=> \q

[postgres@ servername ~]$ export LD_LIBRARY_PATH=/u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pgsql/lib

[postgres@ servername ~]$ /u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pgsql/bin/psql -h RDS-instance.rds.amazonaws.com -p 5432 -d dbname -U root

psql: error: connection to server at " RDS-instance.rds.amazonaws.com " (10.33.131.184), port 5432 failed: FATAL:  no pg_hba.conf entry for host "10.11.12.13", user "root", database "dbname", SSL off

[postgres@ servername ~]$

 

Any ideas of why I’m encountering this issue?


Thanks.


Tony

Re: issues connecting to RDS from psql 9.2 v 14.2

From
Tom Lane
Date:
"Capobianco, Tony" <Tony.Capobianco@bcbsma.com> writes:
> Our RHEL 7.9 installation comes with PostgreSQL 9.2 installed which I know has been desupported.  We installed 14.2
ina non-default location and observe this unusual behavior: 
> [postgres@servername ~]$ psql -h RDS-instance.rds.amazonaws.com -p 5432 -d dbname -U root
> Password for user root:
> psql (9.2.24, server 12.8)
> WARNING: psql version 9.2, server version 12.0.
>          Some psql features might not work.
> SSL connection (cipher: cipher text here, bits: 256)
> Type "help" for help.

> daldb=> \q
> [postgres@ servername ~]$ export LD_LIBRARY_PATH=/u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pgsql/lib
> [postgres@ servername ~]$ /u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pgsql/bin/psql -h
RDS-instance.rds.amazonaws.com-p 5432 -d dbname -U root 
> psql: error: connection to server at " RDS-instance.rds.amazonaws.com " (10.33.131.184), port 5432 failed: FATAL:  no
pg_hba.confentry for host "10.11.12.13", user "root", database "dbname", SSL off 
> [postgres@ servername ~]$

> Any ideas of why I'm encountering this issue?

Looks like you neglected to build psql with OpenSSL support,
and the server is insisting on having an SSL connection.

            regards, tom lane



RE: issues connecting to RDS from psql 9.2 v 14.2

From
"Capobianco, Tony"
Date:
Ok, that makes sense.  Attempting the below, but receiving this error:

./configure --without-readline --with-includes=/usr/lib --with-openssl

checking for CRYPTO_new_ex_data in -lcrypto... no
configure: error: library 'crypto' is required for OpenSSL

[postgres@servername postgresql-14.2]$ ls -lhrt /usr/lib/*crypt*
-rwxr-xr-x 1 root root 547K Feb 28  2017 /usr/lib/libgcrypt.so.11.8.2
lrwxrwxrwx 1 root root   19 Aug 29  2017 /usr/lib/libgcrypt.so.11 -> libgcrypt.so.11.8.2
-rwxr-xr-x 1 root root  38K Sep 14  2021 /usr/lib/libcrypt-2.17.so
lrwxrwxrwx 1 root root   16 Nov 12 07:01 /usr/lib/libcrypt.so.1 -> libcrypt-2.17.so
lrwxrwxrwx 1 root root   23 Nov 12 07:01 /usr/lib/libcrypt.so -> ../../lib/libcrypt.so.1

Tony

-----Original Message-----
From: Tom Lane <tgl@sss.pgh.pa.us>
Sent: Wednesday, April 27, 2022 12:47 PM
To: Capobianco, Tony <Tony.Capobianco@bcbsma.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: issues connecting to RDS from psql 9.2 v 14.2

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you
recognizethe sender and know the content is safe. 


"Capobianco, Tony" <Tony.Capobianco@bcbsma.com> writes:
> Our RHEL 7.9 installation comes with PostgreSQL 9.2 installed which I know has been desupported.  We installed 14.2
ina non-default location and observe this unusual behavior: 
> [postgres@servername ~]$ psql -h RDS-instance.rds.amazonaws.com -p
> 5432 -d dbname -U root Password for user root:
> psql (9.2.24, server 12.8)
> WARNING: psql version 9.2, server version 12.0.
>          Some psql features might not work.
> SSL connection (cipher: cipher text here, bits: 256) Type "help" for
> help.

> daldb=> \q
> [postgres@ servername ~]$ export
> LD_LIBRARY_PATH=/u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pg
> sql/lib [postgres@ servername ~]$
> /u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pgsql/bin/psql -h
> RDS-instance.rds.amazonaws.com -p 5432 -d dbname -U root
> psql: error: connection to server at " RDS-instance.rds.amazonaws.com
> " (1.2.3.4), port 5432 failed: FATAL:  no pg_hba.conf entry for
> host "1.2.3.4", user "root", database "dbname", SSL off [postgres@
> servername ~]$

> Any ideas of why I'm encountering this issue?

Looks like you neglected to build psql with OpenSSL support, and the server is insisting on having an SSL connection.

                        regards, tom lane




Re: issues connecting to RDS from psql 9.2 v 14.2

From
Florents Tselai
Date:


On 27 Apr 2022, at 10:16 PM, Capobianco, Tony <Tony.Capobianco@bcbsma.com> wrote:

Ok, that makes sense. Attempting the below, but receiving this error:

./configure --without-readline --with-includes=/usr/lib --with-openssl

checking for CRYPTO_new_ex_data in -lcrypto... no
configure: error: library 'crypto' is required for OpenSSL

You don’t have crypto installed on your machine.

Try something like 

Redhat / Centos / Fedora : sudo yum install openssl-devel 
Ubuntu / Debian : sudo apt-get install libssl-dev


[postgres@servername postgresql-14.2]$ ls -lhrt /usr/lib/*crypt*
-rwxr-xr-x 1 root root 547K Feb 28 2017 /usr/lib/libgcrypt.so.11.8.2
lrwxrwxrwx 1 root root 19 Aug 29 2017 /usr/lib/libgcrypt.so.11 -> libgcrypt.so.11.8.2
-rwxr-xr-x 1 root root 38K Sep 14 2021 /usr/lib/libcrypt-2.17.so
lrwxrwxrwx 1 root root 16 Nov 12 07:01 /usr/lib/libcrypt.so.1 -> libcrypt-2.17.so
lrwxrwxrwx 1 root root 23 Nov 12 07:01 /usr/lib/libcrypt.so -> ../../lib/libcrypt.so.1

Tony 

-----Original Message-----
From: Tom Lane <tgl@sss.pgh.pa.us> 
Sent: Wednesday, April 27, 2022 12:47 PM
To: Capobianco, Tony <Tony.Capobianco@bcbsma.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: issues connecting to RDS from psql 9.2 v 14.2

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


"Capobianco, Tony" <Tony.Capobianco@bcbsma.com> writes:
Our RHEL 7.9 installation comes with PostgreSQL 9.2 installed which I know has been desupported. We installed 14.2 in a non-default location and observe this unusual behavior:
[postgres@servername ~]$ psql -h RDS-instance.rds.amazonaws.com -p 
5432 -d dbname -U root Password for user root:
psql (9.2.24, server 12.8)
WARNING: psql version 9.2, server version 12.0.
Some psql features might not work.
SSL connection (cipher: cipher text here, bits: 256) Type "help" for 
help.

daldb=> \q
[postgres@ servername ~]$ export 
LD_LIBRARY_PATH=/u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pg
sql/lib [postgres@ servername ~]$ 
/u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pgsql/bin/psql -h 
RDS-instance.rds.amazonaws.com -p 5432 -d dbname -U root
psql: error: connection to server at " RDS-instance.rds.amazonaws.com 
" (1.2.3.4), port 5432 failed: FATAL: no pg_hba.conf entry for 
host "1.2.3.4", user "root", database "dbname", SSL off [postgres@ 
servername ~]$

Any ideas of why I'm encountering this issue?

Looks like you neglected to build psql with OpenSSL support, and the server is insisting on having an SSL connection.

regards, tom lane

RE: issues connecting to RDS from psql 9.2 v 14.2

From
"Capobianco, Tony"
Date:

Bingo!  That was it.  Thanks so much!

 

Tony

 

From: Florents Tselai <florents.tselai@gmail.com>
Sent: Wednesday, April 27, 2022 5:19 PM
To: Capobianco, Tony <Tony.Capobianco@bcbsma.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>; pgsql-admin@lists.postgresql.org
Subject: Re: issues connecting to RDS from psql 9.2 v 14.2

 

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

 

 



On 27 Apr 2022, at 10:16 PM, Capobianco, Tony <Tony.Capobianco@bcbsma.com> wrote:

 

Ok, that makes sense. Attempting the below, but receiving this error:

./configure --without-readline --with-includes=/usr/lib --with-openssl

checking for CRYPTO_new_ex_data in -lcrypto... no
configure: error: library 'crypto' is required for OpenSSL

 

You don’t have crypto installed on your machine.

 

Try something like 

 

Redhat / Centos / Fedora : sudo yum install openssl-devel 

Ubuntu / Debian : sudo apt-get install libssl-dev

 


[postgres@servername postgresql-14.2]$ ls -lhrt /usr/lib/*crypt*
-rwxr-xr-x 1 root root 547K Feb 28 2017 /usr/lib/libgcrypt.so.11.8.2
lrwxrwxrwx 1 root root 19 Aug 29 2017 /usr/lib/libgcrypt.so.11 -> libgcrypt.so.11.8.2
-rwxr-xr-x 1 root root 38K Sep 14 2021 /usr/lib/libcrypt-2.17.so
lrwxrwxrwx 1 root root 16 Nov 12 07:01 /usr/lib/libcrypt.so.1 -> libcrypt-2.17.so
lrwxrwxrwx 1 root root 23 Nov 12 07:01 /usr/lib/libcrypt.so -> ../../lib/libcrypt.so.1

Tony 

-----Original Message-----
From: Tom Lane <
tgl@sss.pgh.pa.us> 
Sent: Wednesday, April 27, 2022 12:47 PM
To: Capobianco, Tony <
Tony.Capobianco@bcbsma.com>
Cc: 
pgsql-admin@lists.postgresql.org
Subject: Re: issues connecting to RDS from psql 9.2 v 14.2

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


"Capobianco, Tony" <Tony.Capobianco@bcbsma.com> writes:

Our RHEL 7.9 installation comes with PostgreSQL 9.2 installed which I know has been desupported. We installed 14.2 in a non-default location and observe this unusual behavior:
[postgres@servername ~]$ psql -h RDS-instance.rds.amazonaws.com -p 
5432 -d dbname -U root Password for user root:
psql (9.2.24, server 12.8)
WARNING: psql version 9.2, server version 12.0.
Some psql features might not work.
SSL connection (cipher: cipher text here, bits: 256) Type "help" for 
help.



daldb=> \q
[postgres@ servername ~]$ export 
LD_LIBRARY_PATH=/u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pg
sql/lib [postgres@ servername ~]$ 
/u01/apps/postgres/postgresql-14.2/pg14.2/usr/local/pgsql/bin/psql -h 
RDS-instance.rds.amazonaws.com -p 5432 -d dbname -U root
psql: error: connection to server at " RDS-instance.rds.amazonaws.com 
" (1.2.3.4), port 5432 failed: FATAL: no pg_hba.conf entry for 
host "1.2.3.4", user "root", database "dbname", SSL off [postgres@ 
servername ~]$



Any ideas of why I'm encountering this issue?


Looks like you neglected to build psql with OpenSSL support, and the server is insisting on having an SSL connection.

regards, tom lane