Randy Cone <cone@hpl.umces.edu> writes:
> What's particularly irksome is that this happens even when no SSL is
> supposed to be used at all, i.e. simple tcp/ip host based client connect.
Hard to see how that could happen, unless some SSL logic has snuck into
the non-SSL code path --- but then I'd expect it to fail immediately.
Are you sure you turned off SSL? (I am not sure it's possible to do that
just by altering pg_hba.conf --- you can force SSL that way, but not
forbid it.)
regards, tom lane