Andreas Pflug <[EMAIL PROTECTED]> writes:
> the attached file is a tcpdump of a connect attempt.
Hm. The postmaster is sending back 'N' indicating that it does not want
to do SSL.
Are you sure you are connecting to an SSL-enabled postmaster?
Also, is your connection by any chance IPV6? It doesn't look like it
from the tcpdump, but I'm not sure I know how to tell.
The relevant bit of code in the postmaster is
#ifdef USE_SSL
/* No SSL when disabled or on Unix sockets */
if (!EnableSSL || port->laddr.addr.ss_family != AF_INET)
SSLok = 'N';
else
SSLok = 'S'; /* Support for SSL */
#else
SSLok = 'N'; /* No support for SSL */
#endif
so one of the paths that chooses 'N' is being followed. The test on
AF_INET is broken, since it should allow for IPV6, but otherwise I
don't see what's getting you.
regards, tom lane
---------------------------(end of broadcast)---------------------------
TIP 8: explain analyze is your friend
