{"action":"created","issue":{"url":"https://api.github.com/repos/sqlalchemy-redshift/sqlalchemy-redshift/issues/106","repository_url":"https://api.github.com/repos/sqlalchemy-redshift/sqlalchemy-redshift","labels_url":"https://api.github.com/repos/sqlalchemy-redshift/sqlalchemy-redshift/issues/106/labels{/name}","comments_url":"https://api.github.com/repos/sqlalchemy-redshift/sqlalchemy-redshift/issues/106/comments","events_url":"https://api.github.com/repos/sqlalchemy-redshift/sqlalchemy-redshift/issues/106/events","html_url":"https://github.com/sqlalchemy-redshift/sqlalchemy-redshift/issues/106","id":189112437,"number":106,"title":"Cannot connect to Redshift due to hostname error","user":{"login":"petroswork","id":20224805,"avatar_url":"https://avatars.githubusercontent.com/u/20224805?v=3","gravatar_id":"","url":"https://api.github.com/users/petroswork","html_url":"https://github.com/petroswork","followers_url":"https://api.github.com/users/petroswork/followers","following_url":"https://api.github.com/users/petroswork/following{/other_user}","gists_url":"https://api.github.com/users/petroswork/gists{/gist_id}","starred_url":"https://api.github.com/users/petroswork/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/petroswork/subscriptions","organizations_url":"https://api.github.com/users/petroswork/orgs","repos_url":"https://api.github.com/users/petroswork/repos","events_url":"https://api.github.com/users/petroswork/events{/privacy}","received_events_url":"https://api.github.com/users/petroswork/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-11-14T13:29:33Z","updated_at":"2016-11-18T18:45:18Z","closed_at":null,"body":"> (psycopg2.OperationalError) server certificate for \"ec2-[IP address].compute-1.amazonaws.com\" does not match host name \"[Hostname].redshift.amazonaws.com\"\r\n\r\nThe same connection URI was fine until last Friday. I've checked that both hostnames correspond to the same IP address. If I set `'sslmode': 'prefer'` in dialect.py, the connection is successful.\r\n\r\nAccording to https://docs.aws.amazon.com/redshift/latest/mgmt/connecting-ssl-support.html,\r\n>SSL support in Amazon Redshift is strictly for encrypting the connection between your client and your cluster; it should not be relied on for authenticating the server. To authenticate the server, install the public key (.pem file) for the SSL certificate on your client and use the key to connect to your clusters.\r\n\r\nPerhaps `sslmode: require` should be the default?"},"comment":{"url":"https://api.github.com/repos/sqlalchemy-redshift/sqlalchemy-redshift/issues/comments/261609117","html_url":"https://github.com/sqlalchemy-redshift/sqlalchemy-redshift/issues/106#issuecomment-261609117","issue_url":"https://api.github.com/repos/sqlalchemy-redshift/sqlalchemy-redshift/issues/106","id":261609117,"user":{"login":"graingert","id":413772,"avatar_url":"https://avatars.githubusercontent.com/u/413772?v=3","gravatar_id":"","url":"https://api.github.com/users/graingert","html_url":"https://github.com/graingert","followers_url":"https://api.github.com/users/graingert/followers","following_url":"https://api.github.com/users/graingert/following{/other_user}","gists_url":"https://api.github.com/users/graingert/gists{/gist_id}","starred_url":"https://api.github.com/users/graingert/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/graingert/subscriptions","organizations_url":"https://api.github.com/users/graingert/orgs","repos_url":"https://api.github.com/users/graingert/repos","events_url":"https://api.github.com/users/graingert/events{/privacy}","received_events_url":"https://api.github.com/users/graingert/received_events","type":"User","site_admin":false},"created_at":"2016-11-18T18:45:17Z","updated_at":"2016-11-18T18:45:17Z","body":"This is looking like a configuration problem on Amazon's end... Or you're\nall getting MITMd!\n\nOn 18 Nov 2016 18:19, \"Gonzalo Diaz\" <notifications@github.com> wrote:\n\n> +1 to this issue... I have the same problem. And I can't disclosure the\n> server URL.\n>\n> —\n> You are receiving this because you commented.\n> Reply to this email directly, view it on GitHub\n> <https://github.com/sqlalchemy-redshift/sqlalchemy-redshift/issues/106#issuecomment-261602657>,\n> or mute the thread\n> <https://github.com/notifications/unsubscribe-auth/AAZQTPehL0kVupvgFMlr_IPdeGj2MMsNks5q_ewzgaJpZM4KxUXF>\n> .\n>\n"}}
{"actor":{"display_login":"graingert"}}