Unix Technical Forum

8.1dev ssl broke?

This is a discussion on 8.1dev ssl broke? within the pgsql Hackers forums, part of the PostgreSQL category; --> I pulled cvs today and performed the following: ../configure --with-openssl --prefix=/tmp/pgsqldev make install cd /tmp/pgsqldev initdb --no-locale -D data ...


Go Back   Unix Technical Forum > Database Server Software > PostgreSQL > pgsql Hackers

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 04-11-2008, 04:46 AM
Joshua D. Drake
 
Posts: n/a
Default 8.1dev ssl broke?

I pulled cvs today and performed the following:

../configure --with-openssl --prefix=/tmp/pgsqldev
make install
cd /tmp/pgsqldev
initdb --no-locale -D data -l data/serverlog

pg_hba.conf lines:

# "local" is for Unix domain socket connections only
#local all all trust
# IPv4 local connections:
hostssl all all 127.0.0.1/32 trust
# IPv6 local connections:
host all all ::1/128 trust

postgresql.conf

listen_addresses = 'localhost' # what IP interface(s) to listen on;
# defaults to localhost, '*' = any
port = 5432
ssl = on


When I try to connect I get:


LOG: redo record is at 0/34D73C; undo record is at 0/0; shutdown TRUE
LOG: next transaction ID: 561; next OID: 16385
LOG: next MultiXactId: 1; next MultiXactOffset: 0
LOG: database system is ready
LOG: transaction ID wrap limit is 2147484132, limited by database
"postgres"
LOG: invalid entry in file "/tmp/pgsqldev/data/pg_hba.conf" at line 73,
token "hostssl"
FATAL: missing or erroneous pg_hba.conf file
HINT: See server log for details.
DEBUG: forked new backend, pid=26717 socket=6
DEBUG: server process (PID 26717) exited with exit code 0

If I change the entries to:

# "local" is for Unix domain socket connections only
#local all all trust
# IPv4 local connections:
host all all 127.0.0.1/32 trust
# IPv6 local connections:
host all all ::1/128 trust

Everything works fine.

Sincerely,

Joshua D. Drake


--
Your PostgreSQL solutions company - Command Prompt, Inc. 1.800.492.2240
PostgreSQL Replication, Consulting, Custom Programming, 24x7 support
Managed Services, Shared and Dedicated Hosting
Co-Authors: plPHP, plPerlNG - http://www.commandprompt.com/

---------------------------(end of broadcast)---------------------------
TIP 9: In versions below 8.0, the planner will ignore your desire to
choose an index scan if your joining column's datatypes do not
match

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 04-11-2008, 04:46 AM
Joshua D. Drake
 
Posts: n/a
Default Re: 8.1dev ssl broke?

FYI: I also followed the instructions per:

http://developer.postgresql.org/docs...s/ssl-tcp.html

Joshua D. Drake wrote:
> I pulled cvs today and performed the following:
>
> ./configure --with-openssl --prefix=/tmp/pgsqldev
> make install
> cd /tmp/pgsqldev
> initdb --no-locale -D data -l data/serverlog
>
> pg_hba.conf lines:
>
> # "local" is for Unix domain socket connections only
> #local all all trust
> # IPv4 local connections:
> hostssl all all 127.0.0.1/32 trust
> # IPv6 local connections:
> host all all ::1/128 trust
>
> postgresql.conf
>
> listen_addresses = 'localhost' # what IP interface(s) to listen on;
> # defaults to localhost, '*' = any
> port = 5432
> ssl = on
>
>
> When I try to connect I get:
>
>
> LOG: redo record is at 0/34D73C; undo record is at 0/0; shutdown TRUE
> LOG: next transaction ID: 561; next OID: 16385
> LOG: next MultiXactId: 1; next MultiXactOffset: 0
> LOG: database system is ready
> LOG: transaction ID wrap limit is 2147484132, limited by database
> "postgres"
> LOG: invalid entry in file "/tmp/pgsqldev/data/pg_hba.conf" at line 73,
> token "hostssl"
> FATAL: missing or erroneous pg_hba.conf file
> HINT: See server log for details.
> DEBUG: forked new backend, pid=26717 socket=6
> DEBUG: server process (PID 26717) exited with exit code 0
>
> If I change the entries to:
>
> # "local" is for Unix domain socket connections only
> #local all all trust
> # IPv4 local connections:
> host all all 127.0.0.1/32 trust
> # IPv6 local connections:
> host all all ::1/128 trust
>
> Everything works fine.
>
> Sincerely,
>
> Joshua D. Drake
>
>



--
Your PostgreSQL solutions company - Command Prompt, Inc. 1.800.492.2240
PostgreSQL Replication, Consulting, Custom Programming, 24x7 support
Managed Services, Shared and Dedicated Hosting
Co-Authors: plPHP, plPerlNG - http://www.commandprompt.com/

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 04-11-2008, 04:46 AM
Michael Fuhr
 
Posts: n/a
Default Re: 8.1dev ssl broke?

On Thu, Jul 07, 2005 at 12:30:35PM -0700, Joshua D. Drake wrote:
> I pulled cvs today and performed the following:
>
> ./configure --with-openssl --prefix=/tmp/pgsqldev


Did the build actually find OpenSSL? Does "ldd postgres" show it
linked against libcrypto and libssl (I'm assuming those are shared
libraries on your system)?

> LOG: invalid entry in file "/tmp/pgsqldev/data/pg_hba.conf" at line 73,
> token "hostssl"


No problems here with the latest HEAD. Is it possible that you're
running a non-SSL enabled postmaster, either because the build didn't
find OpenSSL or because the postmaster you ran is from a different
build?

--
Michael Fuhr
http://www.fuhr.org/~mfuhr/

---------------------------(end of broadcast)---------------------------
TIP 5: Have you checked our extensive FAQ?

http://www.postgresql.org/docs/faq

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 04-11-2008, 04:46 AM
Joshua D. Drake
 
Posts: n/a
Default Re: 8.1dev ssl broke?

Michael Fuhr wrote:
> On Thu, Jul 07, 2005 at 12:30:35PM -0700, Joshua D. Drake wrote:
>
>>I pulled cvs today and performed the following:
>>
>>./configure --with-openssl --prefix=/tmp/pgsqldev

>
>
> Did the build actually find OpenSSL? Does "ldd postgres" show it
> linked against libcrypto and libssl (I'm assuming those are shared
> libraries on your system)?


Bingo... I didn't think about the ldd. **notes** make clean before
recompiling

Sincerely,

Joshua D. Drake




--
Your PostgreSQL solutions company - Command Prompt, Inc. 1.800.492.2240
PostgreSQL Replication, Consulting, Custom Programming, 24x7 support
Managed Services, Shared and Dedicated Hosting
Co-Authors: plPHP, plPerlNG - http://www.commandprompt.com/

---------------------------(end of broadcast)---------------------------
TIP 7: don't forget to increase your free space map settings

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 03:57 PM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com