pg.ddx.io  pgsql-committers@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: Reject SSL connection if ALPN is used but there's no common prot
Date: Tue, 30 Apr 2024 01:26:59 -0400
Message-ID: <1581212.1714454819@sss.pgh.pa.us> (raw)
In-Reply-To: <adc3ebc2-0e3a-4983-bec1-637182b60aae@iki.fi>
References: <E1s1Si1-000dPK-6j@gemulon.postgresql.org>
	<1452995.1714433552@sss.pgh.pa.us>
	<adc3ebc2-0e3a-4983-bec1-637182b60aae@iki.fi>

Heikki Linnakangas <hlinnaka@iki.fi> writes:
> On 30/04/2024 02:32, Tom Lane wrote:
>> A moderately large fraction of the buildfarm doesn't seem to
>> recognize SSL_AD_NO_APPLICATION_PROTOCOL.

> *sigh*. I checked that it exists on OpenSSL 1.1.1, but according to 
> buildfarm it's not present on OpenSSL 1.0.2 or LibreSSL. I'll add an 
> #ifdef guard. OpenSSL 1.0.2 support is about to be removed from master, 
> and, and we can live with a a poor error message on LibreSSL. It's not 
> something that users should normally hit.

WFM.  Thanks!

			regards, tom lane





view thread (4+ messages)

Message-ID: <1581212.1714454819@sss.pgh.pa.us>
Permalink:  ../1581212.1714454819@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/1581212.1714454819@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-committers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, hlinnaka@iki.fi, pgsql-committers@lists.postgresql.org
  Subject: Re: pgsql: Reject SSL connection if ALPN is used but there's no common prot
  In-Reply-To: <1581212.1714454819@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox