Can't connect to PostgreSQL using SSL and trust certificate option

[olorin5800]

When trying to connect to a PostgresSQL database that is using self signed certificates i get the following error:

Error: 295168:error:10000410:SSL routines:OPENSSL_internal:SSLV3_ALERT_HANDSHAKE_FAILURE:....\third_party\boringssl\src\ssl\tls_record.cc:486:SSL alert number 40

Can connect to the same database using any other database client

[mikeburgh]

Interesting.. I guess it's not able to handshake to get the certifcate before it can ignore it..

Can you check your PostgreSQL server's SSL configuration . You can run this query on the server and share the results.

SHOW ssl_ciphers;
SHOW ssl_min_protocol_version;
SHOW ssl_max_protocol_version;

Also, what version of DBCode are you using, and what operating system?

[olorin5800]

ssl_ciphers: HIGH:MEDIUM:+3DES:!aNULL
ssl_min_protocol_version: TLSv1.2
ssl_max_protocol_version: EMPTY

Can also reproduce with managed db from digital ocean

[mikeburgh]

Interesting, I just spun up a DO instance, and it worked fine.. Worked without SSL enabled, when I enabled it I got the expected error about a self signed cert, and then when I trusted it.. worked fine.

What OS are you on ? and which VSCode version/fork ?

This is looking like an issue with node and the SSL handling.. since that's where the boringssl comes into play (it's not a dependency I have)

[olorin5800]

I'm using windows with a normal installation of vs code

1.105.1
7d842fb85a0275a4a8e4d7e040d2625abbf7f084
x64

[olorin5800]

update: was able to also reproduce with an instance hosted using coolify

[mikeburgh]

Since this is the only report of the issue, and there are 1000's of postgres connections a day and you are now seeing it on two hosts.. I think it's going to be something with the VSCode/Node install.. but not sure yet how to track that down.

One quick this to try.. install VSCode Insiders, and see if that works..

[olorin5800]

I tried with insiders, same issue

I also tried SQLTools extension and the preview of PostgresSQL extension both work fine, also tried TablePlus, DataGrip, Dbeaver with the same database and had no issues.

[mikeburgh]

Thanks for trying those.. the SQLtools one is relevant since it also runs under VSCode, and I assume they are using the node driver so it's going through the same process.

I made some tweaks in version 1.17.31.. to not pass SSL parameters that are not present (other keys etc) and to not default to prefering SSL.. Not sure either of these are going to fix it, but if you can give it a try.. Not seeing any other reason why it would be having issues with a self signed cert I cannot replicate.