Re: BUG #19050: psql: could not find digest for NID UNDEF
| От | TKP |
|---|---|
| Тема | Re: BUG #19050: psql: could not find digest for NID UNDEF |
| Дата | |
| Msg-id | CABHFOKH-jVctZjGHa357FWs2C05g37OrETYZ7TfRFB2t5N0MoA@mail.gmail.com обсуждение исходный текст |
| Ответ на | Re: BUG #19050: psql: could not find digest for NID UNDEF (Tom Lane <tgl@sss.pgh.pa.us>) |
| Список | pgsql-bugs |
Hi Tom,
Thank you for answering. I've tested psql connection with two hosts, both yielded the same result (could not find digest for NID UNDEF). Both systems have recent libpq and libssl. Also, "openssl s_client" shows server certificate correctly on both hosts.
TEST CLIENT 1: Rocky Linux 9.6 (Blue Onyx) using default repositories
postgresql package provides psql
postgresql-private-libs package provides libpq.so
openssl-libs package provides libssl.so
# dnf list installed postgresql\* openssl-libs
Installed Packages
openssl-libs.x86_64 1:3.2.2-6.el9_5.1 @anaconda
postgresql.x86_64 16.10-1.module+el9.6.0+32421+7c015469 @appstream
postgresql-private-libs.x86_64 16.10-1.module+el9.6.0+32421+7c015469 @appstream
# psql --version
psql (PostgreSQL) 16.10
# file -L $(which psql)
/bin/psql: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=51379c0b69cb45e885655e41f9f4587e20f679b5, for GNU/Linux 3.2.0, stripped
# ldd $(which psql) | grep -E "libpq|ssl"
libpq.so.private16-5 => /lib64/libpq.so.private16-5 (0x00007f69a0bc8000)
libssl.so.3 => /lib64/libssl.so.3 (0x00007f69a071a000)
TEST CLIENT 2: Rocky Linux 10.0 (Red Quartz) using repositories from download.postgresql.org
postgresql17 package provides psql
postgresql17-libs package provides libpq.so
openssl-libs package provides libssl.so
# dnf list installed postgresql\* openssl-libs
Installed Packages
openssl-libs.x86_64 1:3.2.2-16.el10 @anaconda
postgresql17.x86_64 17.6-1PGDG.rhel10 @pgdg17
postgresql17-libs.x86_64 17.6-1PGDG.rhel10 @pgdg17
# psql --version
psql (PostgreSQL) 17.6
# file -L $(which psql)
/bin/psql: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=794e81c0c1669164e24b22872e8224da031b087c, for GNU/Linux 3.2.0, stripped
# ldd /usr/pgsql-17/bin/psql | grep -E "libpq|ssl"
libpq.so.5 => /usr/pgsql-17/lib/libpq.so.5 (0x00007f30e8412000)
libssl.so.3 => /lib64/libssl.so.3 (0x00007f30e8050000)
Thank you for answering. I've tested psql connection with two hosts, both yielded the same result (could not find digest for NID UNDEF). Both systems have recent libpq and libssl. Also, "openssl s_client" shows server certificate correctly on both hosts.
TEST CLIENT 1: Rocky Linux 9.6 (Blue Onyx) using default repositories
postgresql package provides psql
postgresql-private-libs package provides libpq.so
openssl-libs package provides libssl.so
# dnf list installed postgresql\* openssl-libs
Installed Packages
openssl-libs.x86_64 1:3.2.2-6.el9_5.1 @anaconda
postgresql.x86_64 16.10-1.module+el9.6.0+32421+7c015469 @appstream
postgresql-private-libs.x86_64 16.10-1.module+el9.6.0+32421+7c015469 @appstream
# psql --version
psql (PostgreSQL) 16.10
# file -L $(which psql)
/bin/psql: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=51379c0b69cb45e885655e41f9f4587e20f679b5, for GNU/Linux 3.2.0, stripped
# ldd $(which psql) | grep -E "libpq|ssl"
libpq.so.private16-5 => /lib64/libpq.so.private16-5 (0x00007f69a0bc8000)
libssl.so.3 => /lib64/libssl.so.3 (0x00007f69a071a000)
TEST CLIENT 2: Rocky Linux 10.0 (Red Quartz) using repositories from download.postgresql.org
postgresql17 package provides psql
postgresql17-libs package provides libpq.so
openssl-libs package provides libssl.so
# dnf list installed postgresql\* openssl-libs
Installed Packages
openssl-libs.x86_64 1:3.2.2-16.el10 @anaconda
postgresql17.x86_64 17.6-1PGDG.rhel10 @pgdg17
postgresql17-libs.x86_64 17.6-1PGDG.rhel10 @pgdg17
# psql --version
psql (PostgreSQL) 17.6
# file -L $(which psql)
/bin/psql: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=794e81c0c1669164e24b22872e8224da031b087c, for GNU/Linux 3.2.0, stripped
# ldd /usr/pgsql-17/bin/psql | grep -E "libpq|ssl"
libpq.so.5 => /usr/pgsql-17/lib/libpq.so.5 (0x00007f30e8412000)
libssl.so.3 => /lib64/libssl.so.3 (0x00007f30e8050000)
On Thu, Sep 11, 2025 at 6:00 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
PG Bug reporting form <noreply@postgresql.org> writes:
> When Ed25519 certificate is configured on PG server, I'm able to connect
> with a Java client. Also, openssl and sslscan were able make connection and
> show certificate details. Still CLI tool (psql) does not work with it and
> refuses to connect.
This does look similar to the previous discussion about RSA-PSS.
But we fixed that a couple years ago. Are you sure your libpq
is up-to-date? What about the openssl libraries it's bound to?
> $ openssl version
> OpenSSL 3.2.2 4 Jun 2024 (Library: OpenSSL 3.2.2 4 Jun 2024)
This proves zero about what libpq is using. Applying "ldd"
to psql might be more enlightening.
regards, tom lane
В списке pgsql-bugs по дате отправления: