[Pkg-postgresql-public] Bug#739923: postgresql-9.1: Upgrade failed because of missing server.key file

[Christoph Berg]

Control: tags -1 moreinfo

Re: NOKUBI Takatsugu 2014-02-24 <20140223233930.27150.95214.reportbug at daio-b.daionet.gr.jp>
> latest postgresql-9.1 upgrade causes a error like the following:
> Starting PostgreSQL 9.1 database server: mainThe PostgreSQL server failed to start. Please check the log output: 2014-02-22 04:32:22 JST FATAL: ????????"server.key"????????????: key values mismatch ... failed!
> 
> It seems SSL related issue.
> I chanegd the /etc/postgresql/9.1/main/postgresql.conf to disable
> ssl (ssl=false), then I retried to upgrade, the issue was resolved.

Hi,

thanks for the report.

I don't think the problem is related to the upgrade, but rather a
problem with the ssl keys used. What does the ?????? error message
there say in English? I'd tend to this bit from
src/backend/libpq/be-secure.c:

        if (SSL_CTX_use_PrivateKey_file(SSL_context,
                                        SERVER_PRIVATE_KEY_FILE,
                                        SSL_FILETYPE_PEM) != 1)
            ereport(FATAL,
                    (errmsg("could not load private key file \"%s\": %s",
                            SERVER_PRIVATE_KEY_FILE, SSLerrmessage())));

"key values mismatch" itself is a message from openssl.

Possibly the server.crt and server.key files used have diverged since
the PostgreSQL server was last restarted. Could you check if the files
match?

Christoph
-- 
cb at df7cb.de | http://www.df7cb.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-postgresql-public/attachments/20140224/ae141697/attachment.sig>