Re: BUG #5008: Server Startup Problem - When server is configured for SSL

On Wed, Aug 26, 2009 at 08:47, Jalaj Negi<jalajsinghnegi@gmail.com> wrote:
> Hello, following is PostgreSQL log file.
> I have no certificate to revoke so I havent placed any "root.crl" file in
> servers data directory.
>
> Log File
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> 2009-08-26 11:58:32 ISTLOG:=A0 SSL certificate revocation list file "root=
.crl"
> not found, skipping: No such file or directory
> 2009-08-26 11:58:32 ISTDETAIL:=A0 Certificates will not be checked against
> revocation list.
> 2009-08-26 11:58:32 ISTLOG:=A0 database system was shut down at 2009-08-26
> 11:56:56 IST
> 2009-08-26 11:58:32 ISTFATAL:=A0 the database system is starting up
> 2009-08-26 11:58:34 ISTLOG:=A0 database system is ready to accept connect=
ions
> 2009-08-26 11:58:34 ISTLOG:=A0 SSL certificate revocation list file "root=
.crl"
> not found, skipping: No such file or directory
> 2009-08-26 11:58:34 ISTDETAIL:=A0 Certificates will not be checked against
> revocation list.
> 2009-08-26 11:58:34 ISTFATAL:=A0 the database system is starting up
> 2009-08-26 11:58:39 ISTLOG:=A0 autovacuum launcher started
> 2009-08-26 11:58:39 ISTLOG:=A0 SSL certificate revocation list file "root=
.crl"
> not found, skipping: No such file or directory
> 2009-08-26 11:58:39 ISTDETAIL:=A0 Certificates will not be checked against
> revocation list.
> 2009-08-26 11:58:39 ISTFATAL:=A0 connection requires a valid client
> certificate

<snip>

I think this indicates that pg_ctl is trying to connect to the
database just to see if it's running, but you have set it to require
SSL certificate on connections from localhost. Could that be so? If
so, try setting the requirement for certificates only on non-localhost
addresses and see if it starts up properly in that case.

--=20
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/