sslv3 alert handshake failure

[chaying]

Bonjour

Apres avoir suivi la doc de Postgresql, j'ai les fichiers suivants :

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# -----------------------------
# PostgreSQL configuration file
# -----------------------------
# FILE LOCATIONS
#------------------------------------------------------------------------------
data_directory = '/media/databases/pgsql/data/'		# use data in another directory
					# (change requires restart)
hba_file = '/media/databases/pgsql/data/pg_hba.conf'	# host-based authentication file
					# (change requires restart)
ident_file = '/media/databases/pgsql/data/pg_ident.conf'	# ident configuration file
					# (change requires restart)
 
#------------------------------------------------------------------------------
# CONNECTIONS AND AUTHENTICATION
#------------------------------------------------------------------------------
 
# - Connection Settings -
 
listen_addresses = 'localhost, 192.168.10.2'		# what IP address(es) to listen on;
port = 5432				# (change requires restart)
max_connections = 100			# (change requires restart)
 
# - Security and Authentication -
 
authentication_timeout = 1min		# 1s-600s
ssl = ON				# (change requires restart)
ssl_ciphers = 'ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH'	# allowed SSL ciphers
					# (change requires restart)
ssl_renegotiation_limit = 512MB	# amount of data between renegotiations
password_encryption = ON
#db_user_namespace = off
 
# RESOURCE USAGE (except WAL)
#------------------------------------------------------------------------------
 
# - Memory -
 
shared_buffers = 24MB			# min 128kB or max_connections*16kB
max_fsm_pages = 153600			# min max_fsm_relations*16, 6 bytes each
#------------------------------------------------------------------------------
# ERROR REPORTING AND LOGGING
#------------------------------------------------------------------------------
 
# - Where to Log -
 
log_destination = 'syslog'		# Valid values are combinations of
log_rotation_age = 1d			# Automatic rotation of logfiles will
log_rotation_size = 5MB		# Automatic rotation of logfiles will 
# These are relevant when logging to syslog:
syslog_facility = 'LOCAL0'
syslog_ident = 'postgres'
# - When to Log -
client_min_messages = notice		# values in order of decreasing detail:
log_min_messages = notice		# values in order of decreasing detail:
log_error_verbosity = DEFAULT		# terse, default, or verbose messages
log_min_error_statement = error	# values in order of decreasing detail:
log_min_duration_statement = 0	# -1 is disabled, 0 logs all statements
log_checkpoints = ON
log_connections = ON
log_disconnections = ON
log_duration = ON
log_hostname = ON
log_line_prefix = '%u %d %h'			# special values:
 
# - Locale and Formatting -
 
datestyle = 'iso, dmy'
lc_messages = 'fr_FR.UTF-8'			# locale for system error message
lc_monetary = 'fr_FR.UTF-8'			# locale for monetary formatting
lc_numeric = 'fr_FR.UTF-8'			# locale for number formatting
lc_time = 'fr_FR.UTF-8'				# locale for time formatting
 
# default configuration for text search
default_text_search_config = 'pg_catalog.french'

et :

Code :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
# PostgreSQL Client Authentication Configuration File
# ===================================================
#
# TYPE  DATABASE    USER        CIDR-ADDRESS          METHOD
# "local" is for Unix domain socket connections only
LOCAL   ALL         ALL                               md5
# IPv4 local connections:
host    ALL         ALL         127.0.0.1/32          md5
# IPv6 local connections:
host    ALL         ALL         ::1/128               reject
 
# IPv4 local workstation connections:
hostssl    ALL         ALL         192.168.1.2/32      md5
hostssl    ALL         ALL         192.168.2.2/32      md5

Mais quand j'essaie de me connecter a partir de 192.168.1.2, j'obtiens :

Code :

1
2
3
4
5
#$: psql -U postgres -h 192.168.10.2 -W
Mot de passe pour l'utilisateur postgres : 
psql: erreur SSL : sslv3 alert handshake failure
FATAL:  aucune entrée dans pg_hba.conf pour l'hôte « 192.168.1.2 », utilisateur « postgres »,
base de données « postgres », SSL inactif

J'ai pas mal googueule mais rien trouve d'utile a mon probleme..
Si quelqu'un a une solution, je suis preneur.

-> postgresql 8.3 sur 192.168.10.2
-> postgresql 9.0 sur 192.168.1.2

Merci

[estofilo]

Potentiellement il devrait y avoir un message d'erreur plus informatif dans les logs côté serveur sur la raison de l'échec de la négotiation SSL.