Connecting to database gives error: "sslv3 alert handshake failure"
2 years ago
Article Number
000067999
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: RSA Authentication Manager
RSA Version/Condition: 8.x
Issue
When connecting to the database using a newly created read-only user, the below error appears.
psql: SSL error: sslv3 alert handshake failure
FATAL:  no pg_hba.conf entry for host "$ipaddress", user "rouser", database "db", SSL off


 
Resolution

1.    Create a new database read only user using below command (If not previously created)

/opt/rsa/am/utils/rsautil manage-readonly-dbusers -a create -o <Operations_Console_username> -u <Username_Of_ReadOnly_User -i $ipaddress

2.     View the /opt/rsa/am/rsapgdata/pg_hba.conf file and confirm that newly created user is shown as below:


# TYPE  DATABASE        USER            CIDR-ADDRESS            METHOD
host    db       rsa_radius_db_user     samehost                trust
host    all             all             samehost                md5
host    all             <new_username>             ::1/128                         md5

3.      Point the application at variable PGDATA for reading the configuration file (pg_hba.conf):

export PGDATA=/opt/rsa/am/rsapgdata

rsaadmin@local:~> export PGDATA=/opt/rsa/am/rsapgdata

 

4.  Signal the database to reload the file again using the below command:

/opt/rsa/am/pgsql/bin/pg_ctl reload

 rsaadmin@local:~> /opt/rsa/am/pgsql/bin/pg_ctl reload
server signaled