View Issue Details

IDProjectCategoryView StatusLast Update
0000725Pgpool-IIBugpublic2021-08-02 09:21
Reportereldad Assigned Topengbo  
PriorityhighSeveritymajorReproducibilityalways
Status closedResolutionopen 
Product Version4.1.2 
Summary0000725: SSL connectivity to pgpool fails
DescriptionHi,

I'm trying to setup pgpool with SSL
I created certificate for server and configured PG to work with it, also set
ssl = on
ssl_key = './server.key'
ssl_cert = './server.cert'
on pgpool.conf and restarted the service.

I can see pgpool connections to postgres are using ssl correctly.
but when I try to connect with client to pgpool with ssl mode "required" I get an error message
"SSL connection requested. No SSL enabled connection from this host is configured"
"server does not support SSL, but SSL was required"

I'm able to connect to postgres directly with port 5432 without any issue.
Also tried to set "Trust Server Certificate=true" on the driver properties but without luck.
I'm not using any certificates on the client side.

Please help me understand if I missed something in the setup or its a bug.

Regards,
Eldad
Steps To Reproducetry to connect to pgpool when ssl is enabled, no client certificate.
Additional InformationOS is CentOS Linux release 7.8
2 nodes of PG and pgpool with HA.
pgpool installed with rpm.
Tagsssl

Activities

pengbo

2021-07-30 10:50

developer   ~0003908

The key and certificate files are in the directory where pgpool is starting up.

https://www.pgpool.net/docs/41/en/html/runtime-ssl.html#RUNTIME-SSL-SETTINGS

Could you try to specify "ssl_key" and "ssl_cert" using the full path of key and certificate files?

eldad

2021-08-01 19:27

reporter   ~0003913

This solved the issue, thanks

pengbo

2021-08-02 09:21

developer   ~0003914

I am going to close this issue.

Issue History

Date Modified Username Field Change
2021-07-29 20:19 eldad New Issue
2021-07-29 20:19 eldad Tag Attached: ssl
2021-07-30 10:50 pengbo Note Added: 0003908
2021-07-30 10:50 pengbo Assigned To => pengbo
2021-07-30 10:50 pengbo Status new => feedback
2021-08-01 19:27 eldad Note Added: 0003913
2021-08-01 19:27 eldad Status feedback => assigned
2021-08-02 09:21 pengbo Note Added: 0003914
2021-08-02 09:21 pengbo Status assigned => closed