cloudflare / cloudflare/developer-platform

🐛 BUG: SECP521R1 not supported for Hyperdrive

未关闭
#7 5 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
没有语言数据
星标
1
派生
0
PR 合并指标
30 天内没有已合并 PR

描述

### Which Cloudflare product(s) does this pertain to?

Other

### What versions are you using?

4.4.0 [Wrangler], 16.8 [PostgreSQL]

### What operating system and version are you using?

Windows 10 21H2 (Wrangler) | Alpine 14.2.0 (PostgreSQL)

### Please provide a link to a minimal reproduction

_No response_

### Describe the Bug

SSL support for databases has recently been added to Coolify, but it seems like the signature algorithm provided by CloudFlare Hyperdrive doesn't work with a PostgreSQL docker image with SSL configured by Coolify; Coolify signs the certificates using SECP521R1.

## Steps to reproduce the error
1. Create a PostgreSQL v16 Database on Coolify; uses `postgres:16-alpine` by default
2. Enable SSL and set TLS mode to `require`
3. Start service & proxy database to make it publicly available
4. Copy the public URL and paste onto Wrangler
5. Review the logs on Wrangler and PostgreSQL container

```sh
# wrangler logs
Failed to connect to the provided database: Internal error. [code: 2015]

# postgres16-alpine logs
2025-03-25 19:31:22.565 UTC [872] LOG: could not accept SSL connection: no suitable signature algorithm
```
---

This issue seems to also affect other Docker images such as `postgres:16-bookworm`, and `postgres-15-bookworm`. I haven't bothered testing any other images yet, but it seems like the issues are consistent regardless of the image.

As stated, I assume that this error comes from CF as SECP521R1 may not be supported by CloudFlare. In case if it helps, find below the implementation here: coollabsio/coolify#5027

### Please provide any relevant error logs

_No response_

贡献指南

打开贡献指南

调研方向

首先使用 PostgreSQL 16 Alpine 设置和 TLS 模式 `require` 通过 Hyperdrive/Wrangler 复现连接,然后比较 Wrangler 和 PostgreSQL 日志。阅读链接的 Coolify 实现,并确认 SECP521R1 兼容性是否是失败边界;当报告的连接成功,或不兼容性得到明确确认并由适当的回归检查覆盖时,即表示完成。

由索引模型根据 Issue 内容生成。

评估

技术栈
docker, postgresql
领域
cloud, databases, security
Issue 类型
缺陷
难度
4/5
预计耗时
3-5 天
活跃度
停滞
描述清晰度
需要澄清
新手友好度
25/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。