Bug report #17672

ssl error: certificate validate failed with postgis and qgis 2.18.15

Added by Frédéric CLOITRE almost 7 years ago. Updated almost 6 years ago.

Status:Open
Priority:High
Assignee:-
Category:Authentication system
Affected QGIS version:3.4.3 Regression?:Yes
Operating System:Debian Stretch 64 Easy fix?:No
Pull Request or Patch supplied:No Resolution:
Crashes QGIS or corrupts data:No Copied to github as #:25569

Description

Hi,

This morning, I updated my computer which updated my version 2.18.14 of QGIS to version 2.18.15.
Since this update, I can no longer connect to a PostGIS database that requires the ssl (sslmode = require) mode.

Error message is: 

ssl error: certificate validate failed
.

I tried with a downgrade to previous ltr (2.14.11) and it works.

Any idea?

Thanks.

Sélection_026.png - screenshot (59.6 KB) Frédéric CLOITRE, 2018-02-27 03:35 PM

Saisir les identifiants_263.png - Error message (10.6 KB) Frédéric CLOITRE, 2018-12-29 01:43 PM

History

#1 Updated by Brian Freed almost 7 years ago

I can confirm this on Windows 64-bit as well. Versions 2.18.14 and earlier work fine.
Broken on 2.18.15.
Error message: "ssl certificate verify failed"
If I change PostGIS connection properties to sslmode = disabled, then it connects OK.

#2 Updated by Alessandro Pasotti almost 7 years ago

  • Affected QGIS version changed from master to 2.18.15
  • Regression? changed from No to Yes

#3 Updated by Frédéric CLOITRE over 6 years ago

Tested with last QGIS (3.0.0-3). The problem persist (cf. screenshot).

#4 Updated by Giovanni Manghi over 6 years ago

  • Category changed from DB Manager to Data Provider/PostGIS
  • Affected QGIS version changed from 2.18.15 to 3.0.0

#5 Updated by Frédéric CLOITRE over 6 years ago

Hi,

Is there any solutions? using hostssl to connect qgis on my postgresql server is the only simple solution to get a secure connections for my users.

Best regards.

Thanks

Fred C.

#6 Updated by Frédéric CLOITRE over 6 years ago

Problem is still present on QGIS 3.0.3 (tested on windows 7 64 pro)

#7 Updated by Max Bohnet over 6 years ago

In QGIS 3.0.3 i can add a postgresql-server with username, password and SSL=required without problems.

However, when i convert this to a authentification configuration in order to avoid the password to be stored in the .qgis project file, the 

ssl error: certificate validate failed

appears.

#8 Updated by Brian Freed over 6 years ago

Max might be on to something
We are also using authentication configurations to avoid passwords in .qgs files.
(Error still present both in 2.18.21 LTR and in 3.2.0)

#9 Updated by Paolo Cavallini almost 6 years ago

Could you please check again on current release?
Thanks.

#10 Updated by Giovanni Manghi almost 6 years ago

  • Status changed from Open to Feedback

Paolo Cavallini wrote:

Could you please check again on current release?
Thanks.

Please change status to "feedback" when needed.

#11 Updated by Frédéric CLOITRE almost 6 years ago

I just tried with latest QGIS release (3.4.3 on debian stretch). I still have the same problem. This only happens when using authencation system. It works normally while using basic authentication (with id and password) on database connection window, or even with pg_service.

Giovanni Manghi wrote:

Paolo Cavallini wrote:

Could you please check again on current release?
Thanks.

Please change status to "feedback" when needed.

#12 Updated by Giovanni Manghi almost 6 years ago

  • Status changed from Feedback to Open
  • Category changed from Data Provider/PostGIS to Authentication system
  • Affected QGIS version changed from 3.0.0 to 3.4.3

Also available in: Atom PDF