Azure Database for PostgreSQL
An Azure managed PostgreSQL database service for app development and deployment.
1,425 questions
postgres DB single server logs : SSL - TLS enable/disable
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 78%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Sajith Shetty
21
Reputation points
Hi,
We have a Postgres DB single server for one of our clients, we have disabled SSL with TLS as in the below screenshot. However, why does Postgres logs say it is still enabled; is it a bug with the azure setting or with Postgres.
Postgres log during a connection says :
2021-09-08 09:01:25 UTC-61387be5.53adc-LOG: connection received: host=10.20.8.100 port=1234 pid=1234
2021-09-08 09:01:25 UTC-61387be5.53adc-LOG: connection authorized: user=gapdevdatabase=dev SSL enabled (protocol=TLSv1.2, cipher=ECDHE-RSA-AES256-GCM-SHA384, compression=off)
Azure SSL disabled screenshot:
Azure Database for PostgreSQL
{count} votes
-
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator2021-09-09T20:46:38.6+00:00 Hi @Sajith Shetty Thank you for posting your question. Sorry to hear that you are facing an issue with your Azure PostgreSQL single server.
This could be an intermittent error. Could you please heck if you are still seeing that behavior.Regards,
Oury -
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator
2021-09-10T18:06:22+00:00 Hi @Sajith Shetty Checking if you are still seeing the SSL connection option as "Disabled" in the Azure Portal.
Regards,
Oury -
Sajith Shetty 21 Reputation points
2021-09-13T07:12:22.863+00:00 Hi @Oury Ba-MSFT ,
The issue is same, SSL shows disabled in the azure portal (as per original screenshot) and the Postgres server log shows lines as SSL enabled for every connection established as per the original question.
-
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator
2021-09-20T22:25:38.543+00:00 Hi @Sajith Shetty TI suggest to create to a support ticket so we can better assist you. Please let us know if you run into any issues
https://learn.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-requestRegards,
Oury -
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator
2021-09-27T21:15:27.15+00:00 Hi @Sajith Shetty Were you able to raise a support ticket? Do you have a support plan.?
Regards,
Oury -
Sajith Shetty 21 Reputation points
2021-09-28T04:09:43.287+00:00 Yes, we do have a support plan. The reason I posted here is, we already have upgraded to POSTGRES Flex from a single server. Our clients are now in FLEX and all is well there, so we needed clarification on the behaviour in a single server.
-
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator
2021-10-01T22:18:34.833+00:00 Hi @Sajith Shetty We tried to repro this from our end and was facing the same issue. We are working closely with the Product team to get tgis resolved.
We will give you a update once a fix will be implemented.Thank you for your patience
Regards,
Oury -
Oury Ba-MSFT 20,911 Reputation points Microsoft Employee Moderator
2021-10-06T20:43:10.28+00:00 Enforce SSL connection does not mean that connections that were established will have SSL disabled. It just means that we do not enforce it from our end
If you try to establish SSL connection, then I believe the server will show that an SSL connection is established.
If the you are having issues establishing connections with SSL disabled while we are not enforcing SSL connections, then please let us knowRegards,
Oury
Sign in to comment
Sign in to answer