Re: SSL connectivity issue from PGAdmin to Google Cloud SQL

Hi,

Can you please try to connect PostgreSQL(Google cloud sql) using a
terminal with psql utility where you can provide ssl certificates in psql
command to connect?

Thanks,
Yogesh Mahajan
EnterpriseDB

On Fri, May 24, 2024 at 8:10 PM Prashanth Golla <prashanth(at)modiface(dot)com>
wrote:

> Hi Yogesh,
>
> Thanks for the reply. Since, we have hosted pgadmin on cloud run, which is
> serverless we cannot use terminal to connect.
> We have an application hosted on cloud run using the same database and are
> able to successfully connect when we enable ssl.
> Note - We are using Google cloud SQL certificates which are managed by GCP.
> Do you have any other steps I need to look into?
>
> Thanks,
> Prashanth Golla
>
> On Fri, May 24, 2024 at 12:03 AM Yogesh Mahajan <
> yogesh(dot)mahajan(at)enterprisedb(dot)com> wrote:
>
>> Hi,
>>
>> Error indicates the issue is with ssl certificates itself.
>> Can you please try connecting via terminal using these certificates?
>>
>> Thanks,
>> Yogesh Mahajan
>> EnterpriseDB
>>
>>
>> On Thu, May 23, 2024 at 6:46 PM Prashanth Golla <prashanth(at)modiface(dot)com>
>> wrote:
>>
>>> Hi Support team,
>>>
>>> We have hosted *PGAdmin* on Google cloud run and are able to
>>> successfully connect to google cloud sql server. We are enforcing ssl
>>> connection on google cloud sql for which we copied the ssl certs to
>>> pgadmin(1. using volume mounts on cloud run, 2. Added a simple Dockerfile
>>> to copy certs) and then we used ssl parameters from PGAdmin console and
>>> specified the respective paths for client cert, client key and server cert.
>>>
>>> We get the following error when we select SSL mode as *verify-full*
>>>
>>> [image: image.png]
>>>
>>>
>>> The following error when we choose SSL mode as *require* or *verify-ca*
>>>
>>> [image: image.png]
>>>
>>> *Note*: We tried both copying the certs to custom path i.e.* /var/lib/pgadmin/certs
>>> *and also the default path* /var/lib/pgadmin/.postgresql/, *neither of
>>> them works and we cannot update the path for client certs from pgadmin
>>> console
>>>
>>> Could you please take a look and help us to troubleshoot?
>>>
>>> Thanks,
>>> Prashanth Golla
>>>
>>