AWS aurora-dsql high security documentation change
Summary
Added connection error troubleshooting section with SSL error guidance for older psql clients lacking SNI support
Security assessment
The change addresses a security-adjacent configuration issue where outdated clients (psql <14) cannot establish secure connections due to missing SNI support, which could lead to failed encrypted connections or misconfigurations. Explicitly documents a security-impacting compatibility requirement.
Diff
diff --git a/aurora-dsql/latest/userguide/troubleshooting.md b/aurora-dsql/latest/userguide/troubleshooting.md index 20faa0e1a..1bb1b8c36 100644 --- a//aurora-dsql/latest/userguide/troubleshooting.md +++ b//aurora-dsql/latest/userguide/troubleshooting.md @@ -5 +5 @@ -Authentication errorsAuthorization errorsSQL errorsOCC errors +Connection errorsAuthentication errorsAuthorization errorsSQL errorsOCC errors @@ -16,0 +17,2 @@ The following topics provide troubleshooting advice for errors and issues that y + * Troubleshooting connection errors + @@ -27,0 +30,8 @@ The following topics provide troubleshooting advice for errors and issues that y +## Troubleshooting connection errors + +**error: unrecognized SSL error code: 6** + +Cause: You are using a psql version earlier than [version 14](https://www.postgresql.org/docs/release/14.0/), which doesn't support Server Name Indication (SNI). The SNI is required when connecting to Aurora DSQL. + +You can check your client version with `psql --version`. +