<div dir="ltr">Hi Al.<div><br></div><div>Have you made sure you have configured the Postgres server with ssl support as well?</div><div><br></div><div>There is some good info here on that: <a href="https://www.howtoforge.com/postgresql-ssl-certificates">https://www.howtoforge.com/postgresql-ssl-certificates</a></div><div><br></div><div>It does rely on Postgres having been built with SSL support - so may be worthwhile checking if your build was compiled with SSL support. If it was a package installation - depending on the OS - it may not be out of the box.</div><div><br></div><div>Once you are sure Postgres is running with SSL you may then want to turn on debug logging in PGPool and Postgres (ie: <span style="color:rgb(0,0,0);white-space:pre-wrap">debug_level in pgpool.conf) and restart both PGPool and Postgres - you might find the issue from logs then.</span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap"><br></span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap">Hope that is of some help.</span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap"><br></span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap">Cheers!</span></div><div><span style="color:rgb(0,0,0);white-space:pre-wrap"><br></span></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="border-collapse:collapse"><div><div style="font-size:13.33px"><b style="font-family:Arial">Jonathan J. Eastgate</b><br></div><div style="font-size:13.33px"><div><span style="border-collapse:collapse"><span style="font-family:arial,helvetica,sans-serif;font-size:13.33px">Chief Technology Officer</span><font face="Arial"> | simPRO Software Group<br><span style="font-family:arial,sans-serif;font-size:13.33px">Ph: </span><a style="font-family:arial,sans-serif;font-size:13.33px" value="+611300139467">1300 139 467</a><span style="font-family:arial,sans-serif;font-size:13.33px"> </span><a style="font-family:arial,sans-serif;font-size:13.33px" value="+61730405572">+61 7 3147 8777</a></font></span></div><div><span style="border-collapse:collapse"><font face="Arial"><a style="font-family:arial,sans-serif;font-size:13.33px" value="+61730405572"><br></a></font></span></div><div><span style="border-collapse:collapse"><font face="Arial"><a style="font-family:arial,sans-serif;font-size:13.33px" value="+61730405572"><img src="http://simprogroup.com/media/thejourneyemailsig.png"><br></a></font></span></div><div><font color="#000000" face="Arial"><br></font><font face="arial, helvetica, sans-serif"><font face="Arial">Keep up to date with simPRO at: </font><font face="Arial"><a style="color:rgb(17,85,204)" href="http://simpro.co/blog" target="_blank">simpro.co/blog</a></font><br></font><font color="#ababab" face="arial, helvetica, sans-serif" size="1">The contents of this email are subject to our <a style="color:rgb(17,85,204)" href="http://simpro.com.au/legal/email-confidentiality-notice/" target="_blank">email disclaimer</a>.</font></div></div></div><div><br></div></span></div></div></div></div></div>
<br><div class="gmail_quote">On Sat, Oct 17, 2015 at 9:43 AM, AI Rumman <span dir="ltr"><<a href="mailto:rummandba@gmail.com" target="_blank">rummandba@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi All,</div><div><br></div><div>I am trying to setup Pgpool II SSL connection from<b> client to PGPOOL</b>, where PGPOOL to backend DB is non-ssl.</div><div>Database backend is 9.4 and Pgpool version is "pgpool-II version 3.4.3"</div><div><br></div><div>I followed this doc:</div><div><a href="http://www.pgpool.net/mediawiki/index.php/FAQ" target="_blank">http://www.pgpool.net/mediawiki/index.php/FAQ</a></div><div>And configured ssl parameters as below:</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">enable_pool_hba = on<br>pool_passwd = 'pool_passwd'<br>authentication_timeout = 60<br>ssl = on<br>ssl_key = '/opt/msp/pkg/postgres/pgpool/key/server.key'<br>ssl_cert = '/opt/msp/pkg/postgres/pgpool/key/server.crt'</blockquote><div><br></div><div><br></div><div>pool_hba.conf:</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">hostssl all all <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> trust</blockquote><div><br></div><div><br></div><div>Now, when I am trying to connect from client:</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">psql -h 10.0.0.13 -p 9999 sslmode=require<br>Password: <br>psql: server does not support SSL, but SSL was required</blockquote><div><br></div><div><br></div><div>Am I missing any step here?</div><div><br></div><div>Please advice.</div><div><br></div><div><br></div><div><br></div><div>Thanks & Regards.</div></div>
<br>_______________________________________________<br>
pgpool-general mailing list<br>
<a href="mailto:pgpool-general@pgpool.net">pgpool-general@pgpool.net</a><br>
<a href="http://www.pgpool.net/mailman/listinfo/pgpool-general" rel="noreferrer" target="_blank">http://www.pgpool.net/mailman/listinfo/pgpool-general</a><br>
<br></blockquote></div><br></div>
<br>
--