Hi,

I posted the following to pgadmin-hackers several weeks ago but have not received any replies. Perhaps I posted to the wrong list, and hopefully pgadmin-support is the right one. Has any once else experienced the same issue?

Thanks,
Gabriel


On 08/03/2015 04:37 PM, "Gabriel E. Sánchez Martínez" wrote:
Hi,

I am having an issue with pgAdmin3 that may be a bug, and wanted to share it with you to see what you think. I am running pgAdmin3 1.18.1 on Ubuntu 14.04. There are several server connections configured: one to the local database, and three others to remote servers. All the remote servers require client certificate authentication.

Right after opening pgAdmin, I can connect to any of the databases and use them as expected. If I connect to the second server (i.e. the first remote one), I can use that server without issues, but I cannot establish a connection to the third or fourth servers: I get an error saying "SSL Error: certificate verify failed". I can connect to the local database without problems. In order to connect to the third and fourth servers, I have to restart pgAdmin.

After restarting pgAdmin, I can connect to the third and fourth servers in any order. (The third and fourth servers share the same root certificate server.) I can also connect to the first (local) and second (first remote) servers. However, once I've connected to the second server, no new connections to the third and fourth servers can be established. This includes clicking on a disconnected database in those servers, trying to open a query editor, or connecting after disconnecting. The error dialog has the same message.

The symptoms suggest that something related to the root certificate is being stored by pgAdmin once a connection is established. It is strange that the order of the servers seems to matter. Possibly the CA certificate of the first server is the one that blocks connections to servers requiring SSL appearing later on the list if they use a different CA certificate, but that has yet to be verified.

Any ideas?

Thanks and regards,
Gabriel




--
Sent via pgadmin-support mailing list (pgadmin-support@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgadmin-support

Reply via email to