Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-25 Thread vishal saberwal
I have the answer for one of the two questions i asked: (a) all clients for a server will have same postgresql.key and .crt. (b) I still don't know: Machine A needs to talk (replicate for example: pgreplicator) to machine B. They both are servers on the same network with certificates from the sam

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-25 Thread vishal saberwal
thanks tom for the list on updates on 8.0.4, quick questions, Do all my clients have to have same postgresql.key and postgresql.crt, or can i have different keys and certificates on each client authenticating with the same server? Also, in case of multi master replication with multiple servers,

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread Tom Lane
vishal saberwal <[EMAIL PROTECTED]> writes: > Guess i can stay on 8.0.1 until we get 8.0.4 ... (is it right for me > to ask what data-loss you are talking about) ... Yeah, they're all documented in the pgsql-committers archives. Let's see... 2005-08-19 20:39 tgl * src/: backend/access/h

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread vishal saberwal
Yes you are right again tom ... When i checked, i found that fedora core came with postgresql 7.4 ... hence the reason for my SSL not working ... Installed 8.0.1 on the client and yes it works ... Guess i can stay on 8.0.1 until we get 8.0.4 ... (is it right for me to ask what data-loss you are t

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread Tom Lane
vishal saberwal <[EMAIL PROTECTED]> writes: > I agree with what you said ... They considered 8.0.1 as a stable > version they can rely on (but i believe i can propose a change now > after this SSL fix in 8.0.3) ... Well, actually, I just looked through the CVS logs, and I do not see any changes re

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread vishal saberwal
hi tom, I agree with what you said ... They considered 8.0.1 as a stable version they can rely on (but i believe i can propose a change now after this SSL fix in 8.0.3) ... Can you direct me to a website that shows the bug fixes and new features in 8.0.3 when compared to 8.0.1 and 8.0.2 ... than

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread Tom Lane
vishal saberwal <[EMAIL PROTECTED]> writes: > But, Management requires me to use 8.0.1 (on both servers and clients) > as our total infrastructure and coding is based on it ... Is there a > patch I can apply to 8.0.1 so that I could install same version on all > clients and servers ... There's not

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread Tom Lane
vishal saberwal <[EMAIL PROTECTED]> writes: > LOG: could not accept SSL connection: peer did not return a certificate It looks to me like you've got the server side set up correctly, but not the client side. The client needs to have a certificate to return when the server demands it. See http:/

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread vishal saberwal
Thanks a lot TJ, You were right ... I installed 8.0.3 and then placed the certificates as suggested by you ... It worked ... But, Management requires me to use 8.0.1 (on both servers and clients) as our total infrastructure and coding is based on it ... Is there a patch I can apply to 8.0.1 so tha

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread vishal saberwal
hi TJ, thanks for your input but i think i am still doing something wrong ... I have done exactly what the mysql site said ... The way we have it set up, changing the version really hampers work for many (as it is under use all the time) ... Can i achieve this without changing the version to 8.0.

Re: [BUGS] Ref: BUG#1321: SSL error: sslv3 alert handshake failure

2005-08-24 Thread T.J. Ferraro
Vishal, I can't recall but I think if you use 8.0.3 the error would offer more explanation. Bug 1321 was related to SSL support on windows. The error you are getting isn't a bug. It's basically telling you it can't find the postgresql.key and postgresql.crt. For creating SSL certs I've al