<div dir="ltr"><div>Hi Ishii-San</div><div><br></div><div>Thanks for the confirmation, I am looking into this and will update with the findings and possible fix</div><div><br></div><div>Thanks</div><div>Best regards</div><div>Muhammad Usama</div><div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jan 8, 2020 at 6:28 AM Tatsuo Ishii <<a href="mailto:ishii@sraoss.co.jp">ishii@sraoss.co.jp</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">> Hi Usama,<br>
> <br>
> Pgpool-II does support certificate authentication between client and<br>
> Pgpool-II but it does not support verify option. i.e. it treats as if<br>
> "clientcert=verify-full" in pg_hba.conf.<br>
<br>
I confirmed this.<br>
<br>
t-ishii$ PGSSLCERT=/home/t-ishii/work/Pgpool-II/current/pgpool2/src/test/regression/tests/024.cert_auth/frontend.crt PGSSLKEY=/home/t-ishii/work/Pgpool-II/current/pgpool2/src/test/regression/tests/024.cert_auth/frontend.key psql --set=sslmode=require -h localhost -p 11000 -U foo test<br>
<br>
psql: error: could not connect to server: ERROR: CERT authentication failed<br>
DETAIL: no valid certificate presented<br>
FATAL: client authentication failed<br>
DETAIL: no pool_hba.conf entry for host "127.0.0.1", user "foo", database "test", SSL off<br>
HINT: see pgpool log for details<br>
<br>
Best regards,<br>
--<br>
Tatsuo Ishii<br>
SRA OSS, Inc. Japan<br>
English: <a href="http://www.sraoss.co.jp/index_en.php" rel="noreferrer" target="_blank">http://www.sraoss.co.jp/index_en.php</a><br>
Japanese:<a href="http://www.sraoss.co.jp" rel="noreferrer" target="_blank">http://www.sraoss.co.jp</a><br>
</blockquote></div></div>