Your message dated Mon, 14 Nov 2016 10:04:46 +0000 with message-id <[email protected]> and subject line Bug#819178: fixed in pgbouncer 1.7.2-2 has caused the Debian Bug report #819178, regarding pgbouncer_1.7.2 from pgdg fails with "FATAL TLS setup failed: ssl verify setup failure" to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 819178: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819178 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: pgbouncer Version: 1.7.2-1.pgdg80+1 Severity: important Dear Maintainer, Pgbouncer 1.7.2 on amd64 from apt.postgresql.org appears to fail to start when allowing tls connections with the error "FATAL TLS setup failed: ssl verify setup failure". If client_tls_sslmode is set to disable then pgbouncer starts as usual. If the source of the package is pulled and built the issue goes away and pgbouncer starts with client tls connections enabled. Answers to template questions: Q: What led up to the situation? A: Installed amd64 binary pgbouncer 1.7.2 from jessie-pgd and configured for tls connections as follows: client_tls_sslmode = allow client_tls_key_file = /var/ssl_certs/server.key client_tls_cert_file = /var/ssl_certs/server.crt client_tls_protocols = secure client_tls_ciphers = secure server_tls_sslmode = allow server_tls_protocols = secure server_tls_ciphers = secure Pgbouncer fails to start with uninformative error: "FATAL TLS setup failed: ssl verify setup failure" Q: What exactly did you do (or not do) that was effective (or ineffective)? A: Pulled the source for the package and installed as follows: apt-get -t jessie-pgdg source pgbouncer cd pgbouncer-1.7.2 dpkg-buildpackage -us -uc dpkg -i pgbouncer_1.7.2-1.pgdg80+1_amd64.deb Q: What was the outcome of this action? A: The issue went away and pgbouncer starts with tls enabled. Q: What outcome did you expect instead? A: I expected some sort of issue with certificates, but it appers to be something to do with the binary package only. -- System Information: Debian Release: 8.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages pgbouncer depends on: ii libc6 2.19-18+deb8u3 ii libevent-2.0-5 2.0.21-stable-2 ii libssl1.0.0 1.0.1k-3+deb8u4 ii lsb-base 4.1+Debian13+nmu1 ii postgresql-common 172.pgdg80+1 pgbouncer recommends no packages. Versions of packages pgbouncer suggests: ii python 2.7.9-1 pn python-psycopg2 <none> -- Configuration Files: /etc/init.d/pgbouncer changed [not included] /etc/pgbouncer/pgbouncer.ini [Errno 13] Permission denied: u'/etc/pgbouncer/pgbouncer.ini' /etc/pgbouncer/userlist.txt [Errno 13] Permission denied: u'/etc/pgbouncer/userlist.txt' -- no debconf information
--- End Message ---
--- Begin Message ---Source: pgbouncer Source-Version: 1.7.2-2 We believe that the bug you reported is fixed in the latest version of pgbouncer, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Christoph Berg <[email protected]> (supplier of updated pgbouncer package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 14 Nov 2016 10:17:30 +0100 Source: pgbouncer Binary: pgbouncer Architecture: source Version: 1.7.2-2 Distribution: unstable Urgency: medium Maintainer: Debian PostgreSQL Maintainers <[email protected]> Changed-By: Christoph Berg <[email protected]> Description: pgbouncer - lightweight connection pooler for PostgreSQL Closes: 819178 828496 Changes: pgbouncer (1.7.2-2) unstable; urgency=medium . * Build-Depend on libssl1.0-dev. Closes: #828496. * Build-Depend on ca-certificates to correctly pick up /etc/ssl/certs/ca-certificates.crt. Closes: #819178. Checksums-Sha1: fe1e91134c2fe6ca3f8b3e38c56211ff7cdd8345 2160 pgbouncer_1.7.2-2.dsc 36bd5d3d3a917d05981d275150972e91b622accd 8720 pgbouncer_1.7.2-2.debian.tar.xz Checksums-Sha256: b8e1362b9ef6a1316a7e00eee13241e48753658b8c485fff5fac07bf8b784d25 2160 pgbouncer_1.7.2-2.dsc 4dee03aeee08e17eaa8d1caa59e9daafb8c2cd5e25ded764834b17aec77c3830 8720 pgbouncer_1.7.2-2.debian.tar.xz Files: b6b95799567dc6c79db61ccb01775ee9 2160 database optional pgbouncer_1.7.2-2.dsc eb2c7c046bdfdb6e37b9d198f387b055 8720 database optional pgbouncer_1.7.2-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYKYTTAAoJEExaa6sS0qeuxbgP/i2PvTTS9xmK1zmP5RgcJdmd xZpYj+nBS1AWMjW8YjzmknRkgcSCBmm8udeV6JBu+6zi1OkGiftBiaIllkM40UjR I10gd6O6ACvGZ414oOW7QXCuINmsEGB6IV8z8vuR9FqvfGCB0xL8yM3Sntde3dsN lxlSBVjLcPq3Wn92aK1Nc0JWm3LfpMHXESy2ctAjLL4+iDTKDKhDzZTy1PVBdpPV TNMpBJe4/+lgTjt5tZbf7+RHuIFtuuw+R6TvclRSjDx1n+j7cebTozVS8m/vWuN0 8aseVSzpCKJHYgUtT9U/3jFgFH/+S5G0jEZfMP7FUXijafSiCvSmhBTGmPBoPgBD vjW0QQNSnba5uXGjemvj1VbqHoDVByfBrRtE6sPAD3dUY3h+39PYejbjdtxFhaXZ GaEjbVP5SD3wtb7VZ+Mh1lHpDSoqATXQfBRDnGIRLPEBtnZFjGqEVsoC79MAECD/ x+wY3ShM3HlT57KAh5s8DGa8nIcz/9spKTPC3H7xIJBzW096KDub76KmS2i+TbKk UyD/IxiijgJ5tVBw3D7N06afQTZEqW7KWJQ7fvlB/X38rYRWrkeuzX+iw9YoIA1H R8oymoEChNHwCA1J0LchGy9ZG/s7uE3m68cw6EDHC69vfLID0ldqRB40pJC9F7k5 Oj5zAzxXgKVPXodE47L0 =W29x -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ Pkg-postgresql-public mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-postgresql-public
