Re: "Failed to connect to Postgres database" : No usage specified for certificate (update)

2019-10-01 Thread Adrian Klaver
On 9/30/19 9:21 AM, Marco Ippolito wrote: Hi Adrian, important update. After adding in fabric-ca-server-config.yaml ca:   # Name of this CA   name: fabric_ca   # Key file (is only used to import a private key into BCCSP)   keyfile: /etc/ssl/private/fabric_ca.key   # Certificate file (defau

Re: "Failed to connect to Postgres database" : No usage specified for certificate (update)

2019-09-30 Thread Marco Ippolito
Hi Adrian, important update. After adding in fabric-ca-server-config.yaml ca: # Name of this CA name: fabric_ca # Key file (is only used to import a private key into BCCSP) keyfile: /etc/ssl/private/fabric_ca.key # Certificate file (default: ca-cert.pem) certfile: /etc/ssl/certs/fabri

Re: "Failed to connect to Postgres database"

2019-09-30 Thread Marco Ippolito
Following the indications found here: https://joelonsql.com/2013/04/27/securing-postgresql-using-hostssl-cert-clientcert1/ I created and modified these files: CA: root@pc:/home/marco# ls -lah /etc/ssl/private/fabric_ca.key -rw-r- 1 root ssl-cert 1.8K Sep 30 14:50 /etc/ssl/private/fabric_ca.key

Re: "Failed to connect to Postgres database"

2019-09-28 Thread Adrian Klaver
On 9/28/19 12:07 AM, Marco Ippolito wrote: Hi Adrian, Il giorno ven 27 set 2019 alle ore 21:39 Adrian Klaver mailto:adrian.kla...@aklaver.com>> ha scritto: On 9/27/19 11:02 AM, Marco Ippolito wrote: > Thank you very much Adrian. > Two things: > > 1) >   Why if I j

Re: "Failed to connect to Postgres database"

2019-09-28 Thread Marco Ippolito
Hi Adrian, Il giorno ven 27 set 2019 alle ore 21:39 Adrian Klaver < adrian.kla...@aklaver.com> ha scritto: > On 9/27/19 11:02 AM, Marco Ippolito wrote: > > Thank you very much Adrian. > > Two things: > > > > 1) > > Why if I just specify through port the cluster and the host connection > > I con

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Adrian Klaver
On 9/27/19 11:19 AM, Marco Ippolito wrote: Sorry again, I was cheering up too quickly. With this configuration in fabric-ca-server-config.yaml :    db:   type: postgres   datasource: host=localhost port=5433 user=postgres password=1234 dbname=fabmnet_ca sslmode=disable   tls:  

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Adrian Klaver
On 9/27/19 11:02 AM, Marco Ippolito wrote: Thank you very much Adrian. Two things: 1)  Why if I just specify through port the cluster and the host connection I connect correctly with SSL,  but if I specify also the database and the user it connects it doesn't usel SSL connection, or at least

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Marco Ippolito
Sorry again, I was cheering up too quickly. With this configuration in fabric-ca-server-config.yaml : db: type: postgres datasource: host=localhost port=5433 user=postgres password=1234 dbname=fabmnet_ca sslmode=disable tls: enabled: false certfiles: cli

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Marco Ippolito
Thank you very much Adrian. Two things: 1) Why if I just specify through port the cluster and the host connection I connect correctly with SSL, but if I specify also the database and the user it connects it doesn't usel SSL connection, or at least it doesn't say it uses SSL? : (base) postgres@p

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Adrian Klaver
On 9/27/19 8:20 AM, Marco Ippolito wrote: Correction of my previous email : This is the correct ssl connection, not the one before via socket: A tip, when troubleshooting be as explicit as possible in your command line usage. So for below explicitly state the -d postgres -U postgres. This wi

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Marco Ippolito
Correction of my previous email : This is the correct ssl connection, not the one before via socket: (base) postgres@pc:~$ psql -p5433 -h localhost Password for user postgres: psql (11.5 (Ubuntu 11.5-1.pgdg18.04+1)) SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, bits: 256, com

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Marco Ippolito
Hi Adrian, thanks to your kind explanation I discovered that I can connect to the db without explicitly calling the belonging cluster: (base) postgres@pc:~$ psql -p5433 -d fabmnet_ca psql (11.5 (Ubuntu 11.5-1.pgdg18.04+1)) Type "help" for help. fabmnet_ca=# \conninfo You are connected to databas

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Adrian Klaver
On 9/27/19 5:58 AM, Marco Ippolito wrote: Thanks Daniel. After adding the password, now ssh connection to the cluster fabmnet works: You might want to take a look at: https://help.ubuntu.com/lts/serverguide/postgresql.html And may be the fact the it's compulsory to add a password is testifie

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Marco Ippolito
Thanks Daniel. After adding the password, now ssh connection to the cluster fabmnet works: postgres=# \l List of databases Name| Owner | Encoding | Collate | Ctype | Access privileges +--+--+-+-+-

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Daniel Verite
Marco Ippolito wrote: > (base) postgres@pc:~$ psql --cluster 11/fabmnet -h localhost > Password for user postgres: > psql: FATAL: password authentication failed for user "postgres" > FATAL: password authentication failed for user "postgres" Did you set a password for the postgres user i

Re: "Failed to connect to Postgres database"

2019-09-27 Thread Marco Ippolito
I need to understand this: I dropped the previous fabmnet cluster and re-created a new one: (base) postgres@pc:~$ pg_lsclusters Ver Cluster Port Status OwnerData directory Log file 11 fabmnet 5433 online postgres /var/lib/postgresql/11/fabmnet /var/log/postgresql/postgresql-1

Re: "Failed to connect to Postgres database"

2019-09-26 Thread rob stone
Hi, On Thu, 2019-09-26 at 16:21 +0200, Marco Ippolito wrote: > > db: > type: postgres > datasource: host=localhost port=5433 user=fabmnet_admin > password=password dbname=fabmnetdb sslmode=verify-full > > > (base) marco@pc:~/fabric/fabric-ca$ fabric-ca-server start -b > admin:adminpw

Re: "Failed to connect to Postgres database"

2019-09-26 Thread Adrian Klaver
On 9/26/19 10:10 AM, Marco Ippolito wrote: Hi Adrian, I removed the previous fabmentdb and created a new one whose owner is postgres: (base) postgres@pc:/usr/local/pgsql$ psql --cluster 11/fabmnet psql (11.5 (Ubuntu 11.5-1.pgdg18.04+1)) Type "help" for help. postgres=# \l                  

Re: "Failed to connect to Postgres database"

2019-09-26 Thread Marco Ippolito
Hi Adrian, I removed the previous fabmentdb and created a new one whose owner is postgres: (base) postgres@pc:/usr/local/pgsql$ psql --cluster 11/fabmnet psql (11.5 (Ubuntu 11.5-1.pgdg18.04+1)) Type "help" for help. postgres=# \l List of databases Name| Owne

Re: "Failed to connect to Postgres database"

2019-09-26 Thread Adrian Klaver
On 9/26/19 7:21 AM, Marco Ippolito wrote: In order to restart from a clean situation and configuration, I removed the previous fabric-ca folder, created a new one, and then initiated the fabric-ca-server. With the default SQLite everything seem working fine. But one I try to use the PostgreSQL-