Re: BUG #5008: Server Startup Problem - When server is configured for SSL

On Wed, Aug 26, 2009 at 15:30, Tom Lane<tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> Magnus Hagander <magnus(at)hagander(dot)net> writes:
>> I think this indicates that pg_ctl is trying to connect to the
>> database just to see if it's running, but you have set it to require
>> SSL certificate on connections from localhost. Could that be so? If
>> so, try setting the requirement for certificates only on non-localhost
>> addresses and see if it starts up properly in that case.
>
> Hmm, seems like we should modify pg_ctl's probe code to set
> sslmode = disable.  Letting that default just provides an additional
> way to fail ...

Um. If we modify it, it should be to sslmode=allow. Not "disable".
(*ahem* to what would be a reasonable defualt for libpq in general :P)

But that will still fail if the user has set it up to require a client
certificate.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/