[pgpool-general-jp: 1376] SSL通信ができない？

[TIS西田英勝]

$B@>ED$H?=$7$^$9!#=i$a$FEj9F$5$;$FD:$-$^$9!#(B

pgpool$B$N(Bssl$B ＠ _Dj$r;n$7$F$$$k$N$G$9$,!">e<j$/$$$C$F$J$$$h$&$K;W$($k$N$GEj9F$5(B
$B$;$FD:$-$^$7$?!#(B

2$B$D(Bpgpool ssl$B4XO"$G65$($FM_$7$$;v$,$"$j$^$9!#(B

$BF0:n4D6-$O2<5-$NDL$j$G$9!#(B(AWS$B%5!<%P$G$9!#(B)
OS	Red Hat Enterprise Linux Server release 6.6 (Santiago)
Pgpool	pgpool-II-3.4.2
Postgres	postgresql-9.3.9

Pgpool,Postgres$B$H$b(Bssl = ON$B$K$7$F$$$k!#(B

********** $B-!(B
pool_hba.conf
# "local" is for Unix domain socket connections only
local   all         all                               md5
# IPv4 local connections:
host    all         all         127.0.0.1/32          md5

pg_hba.conf
# "local" is for Unix domain socket connections only
local   all         all                               md5
# IPv4 local connections:
host    all         all         127.0.0.1/32          md5
********* $B-!(B

$B-!$N ＠ _Dj>u67$K$F(Bpsql$B%3%^%s%I$GD>@\(Bpostgres$B$K%"%/%;%9$9$k$H!"(B
$psql db user -h localhost
psql (9.3.9)
SSL connection (cipher: DHE-RSA-AES256-GCM-SHA384, bits: 256)
Type "help" for help.
$B$HI=<($5$l$k!#(B

$B$7$+$7$J$,$i!"(Bpgpool$B7PM3$G%"%/%;%9$9$k$H!"(B
$psql db user -h localhost -p 49800
psql (9.3.9)
Type "help" for help.
$B$HI=<($5$l$k!#(B

SSL connection (cipher: DHE-RSA-AES256-GCM-SHA384, bits: 256)
$B$,I=<($5$l$J$$$N$O$J$<$J$N$+$,$o$+$i$:!#$A$c$s$H(BSSL$BDL?.$G$-$F$$$k$N$G$7$g$&(B
$B$+!)(B

********** $B-"(B
pool_hba.conf
# "local" is for Unix domain socket connections only
local   all         all                               md5
# IPv4 local connections:
host    all         all         127.0.0.1/32          md5

pg_hba.conf
# "local" is for Unix domain socket connections only
local   all         all                               md5
# IPv4 local connections:
hostssl    all         all         127.0.0.1/32          md5
********** $B-"(B

$B-!$N$3$H$b$"$k$N$G!"-"$N ＠ _Dj$KJQ99!#(Bpg_hba.conf$B$K$F(Bhostssl$B$K!#(B
psql$B%3%^%s%I$GD>@\(Bpostgres$B$K%"%/%;%9$9$k$H!"-!;~$HF1$8$J$N$G$9$,!"(B
pgpool$B7PM3$K$9$k$H2<5-$N%(%i!<$,H/@8$7$^$9!#(B

psql:
FATAL:  no pg_hba.conf entry for host "127.0.0.1", user "user", database
"db", SSL off

$B$A$c$s$H(Bpg_hba.conf$B$K$F ＠ _Dj$7$F$$$k$h$&$K;W$($k$N$G$9$,!"$5$C$Q$j860x$,$o$+(B
$B$j$^$;$s!#(B

$B0J>e!"$h$m$7$/$*4j$$$7$^$9!#(B