Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s1Sis-00CTY3-B6 for pgsql-committers@arkaria.postgresql.org; Mon, 29 Apr 2024 15:15:18 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1s1Sip-0008h1-SJ for pgsql-committers@arkaria.postgresql.org; Mon, 29 Apr 2024 15:15:16 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s1Si7-0007Lh-4E for pgsql-committers@lists.postgresql.org; Mon, 29 Apr 2024 15:14:32 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s1Si4-000gvq-S4 for pgsql-committers@lists.postgresql.org; Mon, 29 Apr 2024 15:14:31 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s1Si2-0020Gz-Gv for pgsql-committers@lists.postgresql.org; Mon, 29 Apr 2024 15:14:27 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1s1Si1-000dPK-6j for pgsql-committers@lists.postgresql.org; Mon, 29 Apr 2024 15:14:26 +0000 Content-Type: multipart/mixed; boundary="===============4046649125814746803==" MIME-Version: 1.0 From: Heikki Linnakangas To: pgsql-committers@lists.postgresql.org Subject: pgsql: Reject SSL connection if ALPN is used but there's no common prot X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Mon, 29 Apr 2024 15:14:26 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============4046649125814746803== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 UmVqZWN0IFNTTCBjb25uZWN0aW9uIGlmIEFMUE4gaXMgdXNlZCBidXQgdGhlcmUncyBubyBjb21t b24gcHJvdG9jb2wKCklmIHRoZSBjbGllbnQgc3VwcG9ydHMgQUxQTiBidXQgdHJpZXMgdG8gdXNl IHNvbWUgb3RoZXIgcHJvdG9jb2wsIGxpa2UKSFRUUFMsIHJlamVjdCB0aGUgY29ubmVjdGlvbiBp biB0aGUgc2VydmVyLiBUaGF0IGlzIHN1cmVseSBhIGNvbmZ1c2lvbgpvZiBzb21lIHNvcnQuIEZ1 cnRoZXJtb3JlLCB0aGUgQUxQTiBSRkMgNzMwMSBzYXlzOgoKPiBJbiB0aGUgZXZlbnQgdGhhdCB0 aGUgc2VydmVyIHN1cHBvcnRzIG5vIHByb3RvY29scyB0aGF0IHRoZSBjbGllbnQKPiBhZHZlcnRp c2VzLCB0aGVuIHRoZSBzZXJ2ZXIgU0hBTEwgcmVzcG9uZCB3aXRoIGEgZmF0YWwKPiAibm9fYXBw bGljYXRpb25fcHJvdG9jb2wiIGFsZXJ0LgoKVGhpcyBjb21taXQgbWFrZXMgdGhlIHNlcnZlciBm b2xsb3cgdGhhdCBhZHZpY2UuCgpJbiB0aGUgY2xpZW50LCBzcGVjaWZpY2FsbHkgY2hlY2sgZm9y IHRoZSBPcGVuU1NMIGVycm9yIGNvZGUgZm9yIHRoZQoibm9fYXBwbGljYXRpb25fcHJvdG9jb2wi IGFsZXJ0LiBPdGhlcndpc2UgeW91IGdvdCBhIGNyeXB0aWMgIlNTTAplcnJvcjogU1NMIGVycm9y IGNvZGUgMTY3NzczMjgwIiBlcnJvciBpZiB5b3UgdHJpZWQgdG8gY29ubmVjdCB0byBhCm5vbi1Q b3N0Z3JlU1FMIHNlcnZlciB0aGF0IHJlamVjdHMgdGhlIGNvbm5lY3Rpb24gd2l0aAoibm9fYXBw bGljYXRpb25fcHJvdG9jb2wiLiBFUlJfcmVhc29uX2Vycm9yX3N0cmluZygpIHJldHVybnMgTlVM TCBmb3IKdGhhdCBjb2RlLCB3aGljaCBmcmFua2x5IHNlZW1zIGxpa2UgYW4gT3BlblNTTCBidWcg dG8gbWUsIGJ1dCB3ZSBjYW4KZWFzaWx5IHByaW50IGEgYmV0dGVyIG1lc3NhZ2Ugb3Vyc2VsdmVz LgoKUmVwb3J0ZWQtYnk6IEphY29iIENoYW1waW9uCkRpc2N1c3Npb246IGh0dHBzOi8vd3d3LnBv c3RncmVzcWwub3JnL21lc3NhZ2UtaWQvNmFlZGNhYTUtNjBmMy00OWFmLWE4NTctMmM3NmJhNTVh MWYzQGlraS5maQoKQnJhbmNoCi0tLS0tLQptYXN0ZXIKCkRldGFpbHMKLS0tLS0tLQpodHRwczov L2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9jb21taXRkaWZmLzE3YTgzNGEwNGQ1YTYwYWVkZDY4OTk0 ODhhNTNkOTM5ZDUyNWZiMTYKCk1vZGlmaWVkIEZpbGVzCi0tLS0tLS0tLS0tLS0tCnNyYy9iYWNr ZW5kL2xpYnBxL2JlLXNlY3VyZS1vcGVuc3NsLmMgICAgfCAxMCArKysrKysrLS0tCnNyYy9pbnRl cmZhY2VzL2xpYnBxL2ZlLXNlY3VyZS1vcGVuc3NsLmMgfCAxMiArKysrKysrKysrKysKMiBmaWxl cyBjaGFuZ2VkLCAxOSBpbnNlcnRpb25zKCspLCAzIGRlbGV0aW9ucygtKQoK --===============4046649125814746803==--