Troubleshooting

When reporting a problem, use Help → Copy Diagnostics and paste the result. It contains versions, settings and recent log lines, never passwords, SQL or data.

"self-signed certificate" or "unable to verify the first certificate"

The server's certificate isn't signed by an authority your Mac trusts. Either:

• put the authority's certificate file in the SSL tab's CA certificate field and keep verify full, or
• if you accept the risk on a private network, choose require (encrypts but doesn't check who is answering).

"Hostname/IP does not match certificate's altnames"

You connected using a name (or IP) that isn't in the certificate. Use the host name the certificate was issued for, or verify CA if you only want the authority checked.

"The server does not support SSL"

The server has encryption turned off. Enable TLS on the server, or choose prefer / off if that is intended. The connection list will show it as not encrypted.

Connection timeouts or "connection refused"

• Check the host and port, and that the server accepts connections from your address (firewall, security group, pg_hba.conf, bind-address).
• On a VPN? Make sure it is connected.
• For databases that are only reachable from a server, use the SSH tab.

SSH: "host key changed"

The server's fingerprint is different from the one you confirmed earlier. This can mean the server was rebuilt, or that someone is intercepting the connection. Check with the server's administrator before accepting.

SSH: "authentication failed"

Check the user, and that the key file is a private key (not the .pub file). For encrypted keys, enter the passphrase.

A query never finishes

Press ⌘. to cancel. SQLite and Access queries stop immediately. For other databases, the server is asked to stop; very long statements may take a moment to unwind.

"This connection is read-only"

The connection has Read-only ticked, or the database is Access (always read-only). Edit the connection to change it.

The app can't save passwords

Secure storage is unavailable (for example no Keychain access). The app refuses to store passwords in plain text; connect with the password each time, or fix the Keychain and try again.