Skip site navigation (1) Skip section navigation (2)

Re: Connnection to SSL enabled server

From: Network Administrator <netadmin(at)vcsn(dot)com>
To: Andreas Pflug <pgadmin(at)pse-consulting(dot)de>
Cc: timothy(dot)r(dot)morley(at)kc(dot)frb(dot)org, pgadmin-support(at)postgresql(dot)org,"Adam H(dot) Pendleton" <fmonkey(at)fmonkey(dot)net>,Jean-Michel POURE <jm(at)poure(dot)com>
Subject: Re: Connnection to SSL enabled server
Date: 2003-10-30 15:54:50
Message-ID: 1067529290.3fa1344aeb93c@webmail.vcsn.com (view raw or flat)
Thread:
Lists: pgadmin-support
Quoting Andreas Pflug <pgadmin(at)pse-consulting(dot)de>:

> timothy(dot)r(dot)morley(at)kc(dot)frb(dot)org wrote:
> 
> >
> > I've done some more testing.  I installed pgadmin3-1.0.1 and 
> > pgadmin3-1.1.0-cvs20031030 on a Mandrake 9.2 box.  The Mandrake 9.2 
> > box has all updates applied and is running openssl-0.9.7b-4.1.92mdk. 
> >  When I connect from this machine to my SSL enabled PostgreSQL machine 
> > pgadmin3 crashes(both versions) when I try to execute a query.  I can 
> > use either version to connect to my nonSSL PostgreSQL server and I can 
> > execute a query.  So here is a summary of my current results.
> >
> > Server: PostgreSQL 7.3.4 compiled with option --with-openssl.  Openssl 
> > version 0.9.7c.
> > 1. RedHat9 client: Pgadmin3 crashes when executing a query while 
> > connected to the SSL enabled PostgreSQL server.  Pgadmin3 executes 
> > query against a nonSSL PostgreSQL server and against the SSL enabled 
> > server when ssl = false is set in postgresql.conf. Client has 
> > openssl-0.9.7a installed.
> > 2. Mandrake 9.2 client: Same results as with RedHat9 client. Client 
> > has openssl-0.9.7b-4.1.92mdk installed.
> > 3. Slackware 9.1: All queries on all servers work. Client has 
> > openssl-0.9.7b installed.
> >
> 
> So this seems to be not a ssl version problem, but something about the 
> platforms. We can reduce you results to
> - RedHat9 and Mandrake 9.2 won't work
> - Slackware does.
> Maybe we need special compiler/link flags for RH and Mandrake :-(
> 
> Did you try the binary versions too? Jean-Michel, what's happening on 
> your machines when connecting with ssl=require?
> 
> Regards,
> Andreas
> 
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 7: don't forget to increase your free space map settings
> 

Just to through my $0.02 in.  Slackware does work with ssl=reguire but when I
did try to use the visual query tool (not sure how to use it actually) the 10/29
snapshot did crash.  I haven't retried it though since I wanted to hear some
other feedback.

Also, anything before OpenSSL 0.9.7c or 0.9.6k is not viable because of a recent
CERT.  Please see:

http://www.cert.org/advisories/CA-2003-26.html

-- 
Keith C. Perry
Director of Networks & Applications
VCSN, Inc.
http://vcsn.com
 
____________________________________
This email account is being host by:
VCSN, Inc : http://vcsn.com

In response to

Responses

pgadmin-support by date

Next:From: Andreas PflugDate: 2003-10-30 16:08:01
Subject: Re: Connnection to SSL enabled server
Previous:From: Andreas PflugDate: 2003-10-30 15:26:27
Subject: Re: Constraint Bug

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group