chroot postgresql ssl problem

11 msg	SMTP authentication with saslauthd against PAM
7 msg	Error in SMTP sequence
2 msg	dkim-milter on relay server unknown-jobid exter...
11 msg	Stubborn Cert issue
3 msg	Problems with false positives
4 msg	reject_unverified_recipient case sensitive?
3 msg	dkim=fail (verification error: invalid key gran...
5 msg	? Using header checks on (Postini) X-pstn-levels
2 msg	Can't find error in my config file. Can you?

chroot postgresql ssl problem
\ Sebastian Hennebrueder (11 Apr 2007)

15 msg	What cert to buy
3 msg	Address re-writing
9 msg	Mail Rejected when we relay for a client.
8 msg	Queueing up archive messages
2 msg	Cannot send e-mails from any e-mail clients
1 msg	Re: outbound mail failure - need to fix asap -S...
4 msg	outbound mail failure - need to fix asap
3 msg	Postfix alias problem
2 msg	problem to send a mail to a command in aliases
3 msg	smtpd_auth

Subject:	chroot postgresql ssl problem
Group:	Postfix-users
From:	Sebastian Hennebrueder
Date:	11 Apr 2007

Hello,

I encountered a problem setting up postfix, sasl, postgresql with a
postfix in chroot and a postgresql server supporting ssl.

Testing smpt produces SSL SYSCALL errors.
The following exception is an example. Other modules than rewwrite
encounter the same problem.

Apr 11 18:19:27 asterix postfix/trivial-rewrite[16585]: warning: connect
to pgsql server 127.0.0.1: SSL SYSCALL error: No such file or directory?
---------

Possible Workarounds
--------------------
If I set rewrite and other modules in master.cf to non chrooted, it works.
If I set PostgreSQL to non supporting SSL, it works as well.

But sadly, if I set postgreSQL to support SSL but not for 127.0.0.1 it
does not work.

Postfix seems trying to connect with SSL, fails if it is chrotted and stops.

In my opinion this is in error in the module accessing pgsql. If a
encrypted TCP socket fails, it should try to connect with a non
encrypted TCP socket.

Do you have any solutions to this problem? Is this really a bug?

System and Version
----------------------
Debian etch 4
aptitude install postfix postfix-pgsql postfix-doc
= postfix 2.3.8
aptitude install postfix-tls libsasl2 libsasl2-modules
libsasl2-modules-sql

postconf -n
-----------------
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_interfaces = all
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
mydestination = localhost.laliluna.de, localhost
myhostname = asterix.laliluna.de
mynetworks = 127.0.0.0/8
myorigin = /etc/mailname
recipient_delimiter = +
relayhost =
smtp_tls_session_cache_database = btree:${queue_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert
smtpd_tls_key_file = /etc/postfix/smtpd.key
smtpd_tls_session_cache_database = btree:${queue_directory}/smtpd_scache
smtpd_use_tls = yes
virtual_alias_domains =
virtual_alias_maps = pgsql:/etc/postfix/pgsql-virtual_forwardings.cf
pgsql:/etc/postfix/pgsql-virtual_email2email.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = pgsql:/etc/postfix/pgsql-virtual_domains.cf
virtual_mailbox_maps = pgsql:/etc/postfix/pgsql-virtual_mailboxes.cf
virtual_uid_maps = static:5000