Re: BUG #5008: Server Startup Problem - When server is configured for SSL

On Tue, Aug 25, 2009 at 08:11, Jalaj Negi<jalajsinghnegi(at)gmail(dot)com> wrote:
>
> The following bug has been logged online:
>
> Bug reference:      5008
> Logged by:          Jalaj Negi
> Email address:      jalajsinghnegi(at)gmail(dot)com
> PostgreSQL version: 8.4.0
> Operating system:   Windows XP with SP3
> Description:        Server Startup Problem - When server is configured for
> SSL
> Details:
>
> I am running PostgreSQL version 8.4.0 on Windows XP machine with SP3. I
> installed using Win32 Installer Package and the server runs as a service and
> a service account was automatically created by the Win32 installer package
> during server installation.
>
> With default configuration the server was running fine and took minimal time
> to start up (2-3 seconds). But when I configured server for SSL and
> restarted server it took long time to start up (3-4 minutes) and displayed
> the following startup message.
>
>
> Startup Message
> =====================================================
> The PostgreSQL Server 8.4 service is
> starting...................................
> ..
> The PostgreSQL Server 8.4 service could not be started.
>
> The service did not report an error.
>
> More help is available by typing NET HELPMSG 3534.
>
> The start command returned an error (2)
>
> Press <return> to continue...
> =====================================================
>
>
> Exact Steps
> =====================================================
> 1) Stopped the server.
>
> 2) Made following changes in configuration files for enabling SSL support.
>
> In pg_hba.conf I have only following one entry -
> hostssl all  all  127.0.0.1/32  md5 clientcert=1
>
> In postgresql.conf I made following changes -
> ssl = on
> ssl_ciphers = 'ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH'
>
> Added server.crt, server.key, root.crt, root.crl in servers data directory.
>
> 3) Started the server.
> =====================================================
>
>
> Few Observations
> =====================================================
> 1) When server starts with default configuration (without SSL configuration
> changes) following process are created and running in system - pg_ctl.exe (1
> instance), postgres.exe (6 instances).
>
> 2) When server starts with SSL configuration changes following process are
> created and running in system - postgres.exe (6 instances). This time
> pg_ctl.exe process is absent.
>
> 3) Server starts properly when "clientcert=1" is removed from pg_hba.conf
> file. But if we want server to request client certificates we cant remove
> clientcert parameter from pg_hba.conf file.

What's in the log? Check both the PostgreSQL logfile and the Windows eventlog.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/