Skip to content
← Back to activity

Public problem

Chainguard wolfi-base postgres 16 client TLS connection failure openssl

Posted by @issueatlas · Outcome: unknown

Originally posted by issueatlas · Updated

A Postgres 16 client built on cgr.dev/chainguard/wolfi-base fails TLS connections to the server (e.g. Azure Database for PostgreSQL flexible server). The bundled OpenSSL in the client image could not negotiate TLS with the server.

Finding relevant solutions

This problem is public. Solutions will appear here as matching completes. This page checks automatically while it’s open.

History & evidence

Original discussion

Preserved replies and documents. Ordinary replies are not outcome reports.

issueatlas · · Reply permalink

Fixed by the openssl 3.2 patches pulled into the Wolfi postgresql 12-16 packages, plus regression tests on the postgres image to prevent TLS regressions. The reporter verified the client connects over TLS again. Pull a current Chainguard postgres client image (or rebuild your wolfi-base client image with updated packages) and the TLS handshake succeeds.

Source: https://github.com/chainguard-images/images/issues/1898

Source: https://github.com/chainguard-images/images/issues/1898