Re: pgpool-II 3.7.5 with ssl

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Vikas Sharma <shavikas(at)gmail(dot)com>
Cc: "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: pgpool-II 3.7.5 with ssl
Date: 2019-12-10 16:08:02
Message-ID: 7789.1575994082@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Vikas Sharma <shavikas(at)gmail(dot)com> writes:
> We use postgresql 9.6 and pgpool 3.7.5 and we are now asked to enable ssl
> for 'in transit'. I have setup the ssl server side on the
> postgresql dbs ( master and slave) and can see in pg_stat_ssl that the
> master slave communication and connections from the application are showing
> ssl = 't'

> I have set the parameters in pgpool.conf as well but not sure if the pgpool
> is working with ssl enabled. because when I try to connect
> with psql using pgpool I get below:

> [postgres(at)pgool-server ~]$ psql 'host=localhost port=5432 dbname=postgres
> user=user1 sslmode=require'
> psql: server does not support SSL, but SSL was required

Hm, is pgpool maybe using Unix-socket connections to the database?
I'm not sure why pgpool would be trying to pass SSL-ness of the
connection through to the server in that case, though. Seems like
something you should discuss with the pgpool people.

regards, tom lane

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Adrian Klaver 2019-12-10 16:08:50 Re: Identity columns, DEFAULT keyword and multi-row inserts
Previous Message Adrian Klaver 2019-12-10 16:05:11 Re: PGUSER and initdb