jakob / jakob/Postico

Amazon Aurora: `SSL error : sslv3 alert handshake failure`

Open
#852 0 comments 1 reaction 0 assignees View on GitHub
wontfix
Dominant language
Python
Stars
486
Forks
8
PR merge metrics
No merged PRs in 30d

Description

When connecting to some Amazon Aurora servers, Postico might fail with the following error:

`SSL error : sslv3 alert handshake failure`

This is not a Postico issue, it happens with psql as well if you include the `sslmode=require` setting.

This seems to happen when using the `rds-ca-ecc384-g1` certificate.

As far as I can tell, this is a problem with Amazon Aurora -- the same certificate works when using RDS PostgreSQL.

To fix the problem, please configure your cluster to use a different CA. You can do this in the S3 console by clicking the "Modify" button for the instance.

Contributor guide

No contributing guide indexed for this repository

Research direction

The report names no Postico files or tests and attributes the failure to Amazon Aurora's rds-ca-ecc384-g1 certificate. Start by checking the reported behavior with psql and Aurora, then determine whether Postico has any distinct handling to investigate. Done would require evidence of a Postico-specific fix; the current report instead documents an external configuration workaround.

Written by the indexing model from the issue text.

Assessment

Tech stack
postgresql
Domain
cloud, databases
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.