Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix postgres ssl algo issue - Algorithm (RC2-40-CBC : 0) #373

Merged
merged 1 commit into from
Mar 27, 2024

Conversation

grooviegermanikus
Copy link
Collaborator

@grooviegermanikus grooviegermanikus commented Mar 27, 2024

Problem

PostgreSQL connection fails using TLS with this with recent docker image:

2024-03-20T12:21:52.444 app[7842094c44d538] ams [info] PostgreSQL session cache: Identity
2024-03-20T12:21:52.444 app[7842094c44d538] ams [info] Caused by:
2024-03-20T12:21:52.444 app[7842094c44d538] ams [info] error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:../crypto/evp/evp_fetch.c:373:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()
ErrorStack([Error { code: 50856204, library: "digital envelope routines", function: "inner_evp_generic_fetch", reason: "unsupported", file: "../crypto/evp/evp_fetch.c", line: 373, data: "Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()" }]))

workaround:
disable postgres with PG_ENABLED=false

@grooviegermanikus
Copy link
Collaborator Author

grooviegermanikus commented Mar 27, 2024

the problem results from os-level openssl does not provide the algorithm per default as it has been "moved" to legacy provider further reading

this is how it should look like:

root@7842094c44d538:/# openssl list -providers
Providers:
  default
    name: OpenSSL Default Provider
    version: 3.0.11
    status: active
  legacy
    name: OpenSSL Legacy Provider
    version: 3.0.11
    status: active

@grooviegermanikus grooviegermanikus changed the title fix postgres ssl algo issue fix postgres ssl algo issue - Algorithm (RC2-40-CBC : 0) Mar 27, 2024
@grooviegermanikus grooviegermanikus merged commit a98e52f into main Mar 27, 2024
3 checks passed
@grooviegermanikus
Copy link
Collaborator Author

grooviegermanikus commented Mar 27, 2024


PG_ENABLED on prod:
image

godmodegalactus added a commit that referenced this pull request Mar 27, 2024
* Use jemalloc

* Solving issue of finalized meta after processed block (#365)

* Solving issue of finalized meta after processed block

* Fixing the broken test

* Removing unwanted logs

* Add logs on block queues and reception time

* reduce level of block reception log

* Revert "Solving issue of finalized meta after processed block (#365)"

This reverts commit c09700f.

Production runs show more stable memory use but worse performance on
landing transactions.

* use yellowstone grpc with hacked-windowsize

* upgraded geyser-grpc-connector + increased timeout

* Fix block stream throughput problems

By temporarily pasting in a function to connect to block streams via a
more generously configured endpoint.

* Enabling unstable tokio on fly

* Fixing prioritization heap metrics (#370)

* Fixing prioritization heap metrics

* Fixing transaction sizes tests

* Correctly ending the block streams instead of aborting them

* Replacing exit signal with exit notification (#372)

* Replacing exit signal with exit notification

* Deprecitating nightly version

* Increase connection size

* Fixing issue with multiple notify channels

* Joining heap task instead of aborting

* fix postgres ssl algo issue - RC2-40-CBC  (#373)

* fix 373: openssl-legacy.cnf

* Remove replace console subscriber with tracing subscriber

---------

Co-authored-by: Christian Kamm <mail@ckamm.de>
Co-authored-by: GroovieGermanikus <groovie@mango.markets>
Co-authored-by: Groovie | Mango <95291500+grooviegermanikus@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants