cloudflare / cloudflare/developer-platform
🐛 BUG: SECP521R1 not supported for Hyperdrive
- 主要语言
- 没有语言数据
- 星标
- 1
- 派生
- 0
- PR 合并指标
- 30 天内没有已合并 PR
描述
### Which Cloudflare product(s) does this pertain to?
Other
### What versions are you using?
4.4.0 [Wrangler], 16.8 [PostgreSQL]
### What operating system and version are you using?
Windows 10 21H2 (Wrangler) | Alpine 14.2.0 (PostgreSQL)
### Please provide a link to a minimal reproduction
_No response_
### Describe the Bug
SSL support for databases has recently been added to Coolify, but it seems like the signature algorithm provided by CloudFlare Hyperdrive doesn't work with a PostgreSQL docker image with SSL configured by Coolify; Coolify signs the certificates using SECP521R1.
## Steps to reproduce the error
1. Create a PostgreSQL v16 Database on Coolify; uses `postgres:16-alpine` by default
2. Enable SSL and set TLS mode to `require`
3. Start service & proxy database to make it publicly available
4. Copy the public URL and paste onto Wrangler
5. Review the logs on Wrangler and PostgreSQL container
```sh
# wrangler logs
Failed to connect to the provided database: Internal error. [code: 2015]
# postgres16-alpine logs
2025-03-25 19:31:22.565 UTC [872] LOG: could not accept SSL connection: no suitable signature algorithm
```
---
This issue seems to also affect other Docker images such as `postgres:16-bookworm`, and `postgres-15-bookworm`. I haven't bothered testing any other images yet, but it seems like the issues are consistent regardless of the image.
As stated, I assume that this error comes from CF as SECP521R1 may not be supported by CloudFlare. In case if it helps, find below the implementation here: coollabsio/coolify#5027
### Please provide any relevant error logs
_No response_
贡献指南
调研方向
首先使用 PostgreSQL 16 Alpine 设置和 TLS 模式 `require` 通过 Hyperdrive/Wrangler 复现连接,然后比较 Wrangler 和 PostgreSQL 日志。阅读链接的 Coolify 实现,并确认 SECP521R1 兼容性是否是失败边界;当报告的连接成功,或不兼容性得到明确确认并由适当的回归检查覆盖时,即表示完成。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- docker, postgresql
- 领域
- cloud, databases, security
- Issue 类型
- 缺陷
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 25/100