Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1tQVRZ-00358T-AS
	for pgsql-bugs@arkaria.postgresql.org; Wed, 25 Dec 2024 17:45:13 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1tQVRY-00F4cO-Ie
	for pgsql-bugs@arkaria.postgresql.org; Wed, 25 Dec 2024 17:45:12 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <markus@headcrashing.eu>)
	id 1tQVRY-00F4cF-9x
	for pgsql-bugs@lists.postgresql.org; Wed, 25 Dec 2024 17:45:12 +0000
Received: from smtprelay06.ispgateway.de ([80.67.31.96])
	by makus.postgresql.org with esmtps  (TLS1.2) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <markus@headcrashing.eu>)
	id 1tQVRW-000X83-0a
	for pgsql-bugs@lists.postgresql.org;
	Wed, 25 Dec 2024 17:45:11 +0000
Received: from [78.43.243.63] (helo=[192.168.178.53])
	by smtprelay06.ispgateway.de with esmtpsa  (TLS1.2) tls
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.98)
	(envelope-from <markus@headcrashing.eu>)
	id 1tQVRR-000000004Si-2bkw;
	Wed, 25 Dec 2024 18:45:05 +0100
Content-Type: multipart/alternative;
 boundary="------------oJVzzZxmDdvFuhZQ9wlLiJJy"
Message-ID: <036d3915-e6ef-420b-ba2b-5cd7e94e0a66@headcrashing.eu>
Date: Wed, 25 Dec 2024 18:45:06 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: psql v16.3 successfully connects via TLSv1.3 proxy, but psql
 v16.4 says "tlsv1 alert no application protocol"
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-bugs@lists.postgresql.org
References: <68ff85d7-9b41-40ec-bddf-0ca74fe09875@headcrashing.eu>
 <1794654.1735148362@sss.pgh.pa.us>
From: Markus KARG <markus@headcrashing.eu>
In-Reply-To: <1794654.1735148362@sss.pgh.pa.us>
X-Df-Sender: bWFya3VzQGhlYWRjcmFzaGluZy5ldQ==
List-Id: <pgsql-bugs.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-bugs@lists.postgresql.org>
List-Owner: <mailto:pgsql-bugs-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-bugs>
Archived-At: 
 <https://www.postgresql.org/message-id/036d3915-e6ef-420b-ba2b-5cd7e94e0a66%40headcrashing.eu>
Precedence: bulk

This is a multi-part message in MIME format.
--------------oJVzzZxmDdvFuhZQ9wlLiJJy
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

> Markus KARG<markus@headcrashing.eu> writes:
>> Summary: The TLS behavior of psql changed between 16.3 and 16.4 as shown
>> below.
> Have you tried the current release (16.6)?
>
> 			regards, tom lane


Yes, but psql 16.6 fails in the same way:

root@hetzner-2:~# docker run -it postgres:16.6 psql 
"host=headcrashing.eu port=5432 dbname=postgres user=postgres 
password=HeadcrashingPostgres2022 sslmode=require"
psql: error: connection to server at "headcrashing.eu" (49.13.53.107), 
port 5432 failed: SSL error: tlsv1 alert no application protocol

-Markus

--------------oJVzzZxmDdvFuhZQ9wlLiJJy
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <blockquote type="cite" cite="mid:1794654.1735148362@sss.pgh.pa.us">
      <pre wrap="" class="moz-quote-pre">Markus KARG <a class="moz-txt-link-rfc2396E" href="mailto:markus@headcrashing.eu">&lt;markus@headcrashing.eu&gt;</a> writes:
</pre>
      <blockquote type="cite">
        <pre wrap="" class="moz-quote-pre">Summary: The TLS behavior of psql changed between 16.3 and 16.4 as shown 
below.
</pre>
      </blockquote>
      <pre wrap="" class="moz-quote-pre">
Have you tried the current release (16.6)?

			regards, tom lane</pre>
    </blockquote>
    <p><br>
    </p>
    <p>Yes, but psql 16.6 fails in the same way:</p>
    <p>root@hetzner-2:~# docker run -it postgres:16.6 psql
      "host=headcrashing.eu port=5432 dbname=postgres user=postgres
      password=HeadcrashingPostgres2022 sslmode=require"<br>
      psql: error: connection to server at "headcrashing.eu"
      (49.13.53.107), port 5432 failed: SSL error: tlsv1 alert no
      application protocol</p>
    <p>-Markus<span style="white-space: pre-wrap">
</span></p>
  </body>
</html>

--------------oJVzzZxmDdvFuhZQ9wlLiJJy--