Re: SSL client configuration ...

Hmm...

>
> - hostssl  all  dbuser      212.205.129.107     255.255.255.0  md5 in
> pg_hba.conf

Shouldn't that be a 255.255.255.255 netmask?

> - generated server.crt and server.key as recommended in
> Administrator's Guide

Not in the correct directory though.  You need to put them both in:

    /home/pagomen/PostGress/data

The netmask is being interpreted incorrectly as IPv6 (hence the non-IP
host message):

FATAL:  no pg_hba.conf entry for host "::ffff:212.205.129.107", user
"dbuser", database "template1", SSL off

Get your server.crt and server.key in the right directory, and fix the
netmask in pg_hba.conf, and it just might work...

-- Mitch