Comments (6)
mdevan
commented on June 12, 2024
Are the env. vars. PGSSLCERT and PGSSLKEY set and pointing to valid files?
If not, do the files ~/.postgresql/postgresql.crt and ~/.postgresql/postgresql.key exist?
from pgmetrics.
mc3
commented on June 12, 2024
Am 01.11.2018 um 16:32 schrieb Mahadevan ***@***.***>:
Are the env. vars. PGSSLCERT and PGSSLKEY set and pointing to valid files?
They are not set.
If not, do the files ~/.postgresql/postgresql.crt and ~/.postgresql/postgresql.key exist?
They exist as links to cert and key.
…---
PGP-Key:29E99DD6 ☀ computing @ chaos claudius
from pgmetrics.
mdevan
commented on June 12, 2024
The reason is that the cipher DHE-RSA-AES256-GCM-SHA384 is not supported by pgmetrics. Only the ECDHE-* variants are supported.
It's not clear why this cipher was chosen by your server. You can try getting PostgreSQL to use ECDHE-RSA-AES256-GCM-SHA384 instead, by including this value in the ssl_ciphers setting.
from pgmetrics.
mc3
commented on June 12, 2024
Am 22.12.2018 um 13:03 schrieb Mahadevan ***@***.***>:
The reason is that the cipher DHE-RSA-AES256-GCM-SHA384 is not supported by pgmetrics. Only the ECDHE-* variants are supported.
It's not clear why this cipher was chosen by your server. You can try getting PostgreSQL to use ECDHE-RSA-AES256-GCM-SHA384 instead, by including this value in the ssl_ciphers setting.
I changed my ssl_ciphers in the server config to:
ssl_ciphers = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:ECDHE-RSA-RC4-SHA
(Thanks for the advice (-:), but:
ajr$ pgmetrics -h db2 -p 2222 -w -f human operations
pgmetrics: pq: no pg_hba.conf entry for host "2a05:bec0:26:10::124", user "ajr", database "operations", SSL off
ajr$ psql -p 2222
Timing is on.
SET
Time: 0,591 ms
search_path
---------------------------------------------------------
erdb, syslog, pki, dd, ext_ip4r, archiveopteryx, public
(1 row)
Time: 0,561 ms
psql (10.5, server 10.6)
SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES128-GCM-SHA256, bits: 128, compression: off)
Type "help" for help.
Axel
PS: There is a client certificate in use
---
PGP-Key:29E99DD6 ☀ computing @ chaos claudius
from pgmetrics.
mdevan
commented on June 12, 2024
pgmetrics is trying to connect without SSL (this is the default behavior). Can you try:
PGSSLMODE=require pgmetrics -h db2 -p 2222 -w -f human operations
from pgmetrics.
mc3
commented on June 12, 2024
Am 23.12.2018 um 04:45 schrieb Mahadevan ***@***.***>:
pgmetrics is trying to connect without SSL (this is the default behavior). Can you try:
PGSSLMODE=require pgmetrics -h db2 -p 2222 -w -f human operations
With server setting
ssl_ciphers = 'ECDHE:DHE+HIGH:!eNULL:!aNULL:!MD5:!RC2:!RC4:@strength'
ssl_prefer_server_ciphers = on
it works.
Thanks for this nice program.
Axel
---
PGP-Key:29E99DD6 ☀ computing @ chaos claudius
from pgmetrics.
Related Issues (20)
- pg_stat_statements scan failed: sql: Scan error on column index 3, name "left": converting NULL to string is unsupported HOT 2
- AWS RDS PostgreSQL - pg_ls_dir and pg_current_logfile HOT 3
- get all database details without specifying dbnames? HOT 2
- use iso date format everywhere in report
- Log parsing clarification HOT 4
- How to read some values reported by pgmetrics (e.g. shared_buffers, max_wal_size) HOT 6
- Postgres 13: wal_keep_segments displays no value HOT 2
- What determines the sort order for list of table details in pgmetrics output? HOT 2
- Incorrect min_wal_size displayed for PG ver >= 10 HOT 2
- Improve heuristic to check if PG is local HOT 4
- Slow bloat query HOT 4
- AWS RDS, Aurora cloudwatch collection error HOT 3
- pg_stat_archiver query failed: sql: Scan error on column index 6, name "date_part": converting NULL to int64 is unsupported HOT 2
- Omitting retrieval of index definition HOT 1
- Please, add building instructions HOT 2
- Support Citus 11 HOT 2
- Crashes PSQL when table has high Partition Count HOT 2
- Break up the Postgres shared memory is not available in pgmetrics/pgDash currently.
- how to collect system info with pgmetrics HOT 1
- [Feature] Support connect by Keyword/Value Connection Strings
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pgmetrics.