Skip site navigation (1) Skip section navigation (2)

Re: BUG #5008: Server Startup Problem - When server is configured for SSL

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Jalaj Negi <jalajsinghnegi(at)gmail(dot)com>
Cc: pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #5008: Server Startup Problem - When server is configured for SSL
Date: 2009-08-25 16:42:28
Message-ID: 9837222c0908250942i25c50a21o513864d173ee03a9@mail.gmail.com (view raw or flat)
Thread:
Lists: pgsql-bugs
On Tue, Aug 25, 2009 at 08:11, Jalaj Negi<jalajsinghnegi(at)gmail(dot)com> wrote:
>
> The following bug has been logged online:
>
> Bug reference:      5008
> Logged by:          Jalaj Negi
> Email address:      jalajsinghnegi(at)gmail(dot)com
> PostgreSQL version: 8.4.0
> Operating system:   Windows XP with SP3
> Description:        Server Startup Problem - When server is configured for
> SSL
> Details:
>
> I am running PostgreSQL version 8.4.0 on Windows XP machine with SP3. I
> installed using Win32 Installer Package and the server runs as a service and
> a service account was automatically created by the Win32 installer package
> during server installation.
>
> With default configuration the server was running fine and took minimal time
> to start up (2-3 seconds). But when I configured server for SSL and
> restarted server it took long time to start up (3-4 minutes) and displayed
> the following startup message.
>
>
> Startup Message
> =====================================================
> The PostgreSQL Server 8.4 service is
> starting...................................
> ..
> The PostgreSQL Server 8.4 service could not be started.
>
> The service did not report an error.
>
> More help is available by typing NET HELPMSG 3534.
>
> The start command returned an error (2)
>
> Press <return> to continue...
> =====================================================
>
>
> Exact Steps
> =====================================================
> 1) Stopped the server.
>
> 2) Made following changes in configuration files for enabling SSL support.
>
> In pg_hba.conf I have only following one entry -
> hostssl all  all  127.0.0.1/32  md5 clientcert=1
>
> In postgresql.conf I made following changes -
> ssl = on
> ssl_ciphers = 'ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH'
>
> Added server.crt, server.key, root.crt, root.crl in servers data directory.
>
> 3) Started the server.
> =====================================================
>
>
> Few Observations
> =====================================================
> 1) When server starts with default configuration (without SSL configuration
> changes) following process are created and running in system - pg_ctl.exe (1
> instance), postgres.exe (6 instances).
>
> 2) When server starts with SSL configuration changes following process are
> created and running in system - postgres.exe (6 instances). This time
> pg_ctl.exe process is absent.
>
> 3) Server starts properly when "clientcert=1" is removed from pg_hba.conf
> file. But if we want server to request client certificates we cant remove
> clientcert parameter from pg_hba.conf file.

What's in the log? Check both the PostgreSQL logfile and the Windows eventlog.

-- 
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/

In response to

Responses

pgsql-bugs by date

Next:From: James BardinDate: 2009-08-25 19:48:03
Subject: BUG #5011: Standby recovery unable to follow timeline change
Previous:From: David FetterDate: 2009-08-25 14:40:00
Subject: Re: BUG #5009: Loss of information

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group