"aborting startup due to error" err="failed to connect to `host=timescaledb user=postgres database=postgres`: tls error (server refused TLS connection)"

[Rajakavitha1]

When Installing Promscale on Docker. The following error appears if the password contains any special characters. However, when there are no special characters in the password the installation goes through.

2022/05/27 08:16:12 maxprocs: Leaving GOMAXPROCS=4: CPU quota undefined
level=info ts=2022-05-27T08:16:12.593Z caller=runner.go:75 msg="Version: 0.11.0, Commit Hash: f49197aac5f58755942fcbeb673271b7def122b2, Branch: HEAD"
level=info ts=2022-05-27T08:16:12.593Z caller=runner.go:80 config="{ListenAddr::9201 ThanosStoreAPIListenAddr: OTLPGRPCListenAddr::9202 PgmodelCfg:{CacheConfig:{SeriesCacheInitialSize:250000 seriesCacheMemoryMaxFlag:{kind:0 value:50} SeriesCacheMemoryMaxBytes:1649747558 MetricsCacheSize:10000 LabelsCacheSize:10000 ExemplarKeyPosCacheSize:10000} AppName:[email protected] Host:timescaledb Port:5432 User:postgres Password:**** Database:postgres SslMode:allow DbConnectionTimeout:1m0s IgnoreCompressedChunks:false AsyncAcks:false WriteConnectionsPerProc:1 MaxConnections:-1 UsesHA:false DbUri:**** EnableStatementsCache:true} LogCfg:{Level:info Format:logfmt} TracerCfg:{OtelCollectorEndpoint: OtelCollectorTLSCertFile: OtelCollectorTLSKeyFile: JaegerCollectorEndpoint: SamplingRatio:1} APICfg:{AllowedOrigin:^(?:.*)$ ReadOnly:false HighAvailability:false AdminAPIEnabled:false TelemetryPath:/metrics Auth:0x400028f2c0 MultiTenancy:<nil> Rules:<nil>} LimitsCfg:{targetMemoryFlag:{kind:0 value:80} TargetMemoryBytes:3299495116} TenancyCfg:{SkipTenantValidation:false EnableMultiTenancy:false AllowNonMTWrites:false ValidTenantsStr:allow-all ValidTenantsList:[]} PromQLCfg:{EnabledFeatureMap:map[] PromscaleEnabledFeatureList:[] MaxQueryTimeout:2m0s SubQueryStepInterval:1m0s LookBackDelta:5m0s MaxSamples:50000000 MaxPointsPerTs:11000} RulesCfg:{NotificationQueueCapacity:10000 OutageTolerance:1h0m0s ForGracePeriod:10m0s ResendDelay:1m0s PrometheusConfigAddress: PrometheusConfig:<nil>} TracingCfg:{MaxTraceDuration:1h0m0s} ConfigFile:config.yml DatasetConfig: TLSCertFile: TLSKeyFile: ThroughputInterval:1s Migrate:true StopAfterMigrate:false UseVersionLease:true InstallExtensions:true UpgradeExtensions:true UpgradePrereleaseExtensions:false StartupOnly:false}"
level=error ts=2022-05-27T08:16:12.619Z caller=runner.go:116 msg="aborting startup due to error" err="failed to connect to `host=timescaledb user=postgres database=postgres`: tls error (server refused TLS connection)"
rajakavithakodhandapani@Rajakavithas-MacBook-Pro-2 ~ % docker run --name timescaledb -e POSTGRES_PASSWORD=<password> \     
-d -p 5432:5432 \                               
--network promscale \  
timescale/timescaledb-ha:pg14-latest \
postgres -csynchronous_commit=off
WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
02b0bff516cf7d6e2fbe35b73c41780aed93e5082f85980c06e41ebe7f6c030f
rajakavithakodhandapani@Rajakavithas-MacBook-Pro-2 ~ % docker network create --driver bridge promscale
Error response from daemon: network with name promscale already exists
rajakavithakodhandapani@Rajakavithas-MacBook-Pro-2 ~ % docker run --name promscale -d -p 9201:9201 \                
--network promscale timescale/promscale:latest \
-db.password=<password> \
-db.port=5432 \
-db.name=postgres \
-db.host=timescaledb \
-db.ssl-mode=allow
9caa444b261bdcce6861ce6fcc8d04f9706d8878104cc54fbf987f2a7c0f247a
rajakavithakodhandapani@Rajakavithas-MacBook-Pro-2 ~ % docker ps -la
CONTAINER ID   IMAGE                        COMMAND                  CREATED          STATUS          PORTS                    NAMES
9caa444b261b   timescale/promscale:latest   "/promscale -db.pass…"   27 minutes ago   Up 27 minutes   0.0.0.0:9201->9201/tcp   promscale
rajakavithakodhandapani@Rajakavithas-MacBook-Pro-2 ~ % ```

[paulfantom]

Considering password is passed directly from command line, did you escape special characters or wrapped password in single quotes '<password>'?

[Rajakavitha1]

Considering password is passed directly from command line, did you escape special characters or wrapped password in single quotes '<password>'?

Neither!!! I just passed it directly.

[VineethReddy02]

I see multiple cmds are shared here

docker run --name timescaledb -e POSTGRES_PASSWORD=<password> \     
-d -p 5432:5432 \                               
--network promscale \  
timescale/timescaledb-ha:pg14-latest \
postgres -csynchronous_commit=off

docker run --name promscale -d -p 9201:9201 \                
--network promscale timescale/promscale:latest \
-db.password=<password> \
-db.port=5432 \
-db.name=postgres \
-db.host=timescaledb \
-db.ssl-mode=allow

The error you share can only happen in two ways

1. Incorrect password is provided
2. You didn't mention the -db.ssl-mode=allow flag?

I tried to reproduce the issue and couldn't succeed, Can you share the exact command that you tried including the values you specified with flags?

[Rajakavitha1]

@VineethReddy02 !!! I shared the required details with you on slack DM. Hope you can reproduce the issue now.

[VineethReddy02]

This is an issue occurring only on using special characters in password. I was able to re-produce using the password as 'password'

closing this issue, as we haven’t received multiple requests from users with this kind of password format and it's quite stale! :)

If you still have a need for this, Please open a new issue.

Thanks!