From: Tom Lane <tgl@sss.pgh.pa.us>
To: Jacob Champion <jchampion@timescale.com>
cc: Kyotaro Horiguchi <horikyota.ntt@gmail.com>,
        peter.eisentraut@enterprisedb.com,
        Michael Paquier <michael@paquier.xyz>, byavuz81@gmail.com,
        pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17522: While using --with-ssl=openssl and
 PG_TEST_EXTRA='ssl' options, SSL test fails on OpenBSD 7.1
In-reply-to: 
 <CAAWbhmiTezhY+9z9gidpWZ9Y7Wpms5COS0A2a2ongJj_0+1wRg@mail.gmail.com>
References: <17522-bfcd5c603b5f4daa@postgresql.org>
 <Yq/j3FusKULwbFve@paquier.xyz>
 <dc372104-a17d-a2de-bd6a-d9b5b3c7a829@enterprisedb.com>
 <20220621.092753.452165241922345774.horikyota.ntt@gmail.com>
 <CAAWbhmjffOGEqKa2F0hzz+pm8sYTgcda5PVjNGMDzykv4nZzhg@mail.gmail.com>
 <CAAWbhmiTjZnFVLPrVprCmV7HQcG+r3cJqj2zP80sfLNkCsCROg@mail.gmail.com>
 <CAAWbhmiTezhY+9z9gidpWZ9Y7Wpms5COS0A2a2ongJj_0+1wRg@mail.gmail.com>
Comments: In-reply-to Jacob Champion <jchampion@timescale.com>
	message dated "Tue, 21 Jun 2022 15:15:05 -0500"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <3091665.1655846153.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Tue, 21 Jun 2022 17:15:53 -0400
Message-ID: <3091666.1655846153@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/3091666.1655846153%40sss.pgh.pa.us>
Precedence: bulk

Jacob Champion <jchampion@timescale.com> writes:
> On Tue, Jun 21, 2022 at 3:07 PM Jacob Champion <jchampion@timescale.com>=
 wrote:
>> There is also a question of why LibreSSL doesn't do the same for the
>> IPv6 CIDR test. Should we proactively disable SNI for both of them?

> (Never mind; it's because we don't send SNI if there's a colon
> anywhere in the host string.)

So maybe the simplest fix is to do the same if there's a '/' anywhere?
More generally, should we limit the SNI host string to chars allowed in
DNS names?

			regards, tom lane