From: Heikki Linnakangas <hlinnaka@iki.fi>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: Reject SSL connection if ALPN is used but there's no common prot
Date: Tue, 30 Apr 2024 08:19:53 +0300
Message-ID: <adc3ebc2-0e3a-4983-bec1-637182b60aae@iki.fi> (raw)
In-Reply-To: <1452995.1714433552@sss.pgh.pa.us>
References: <E1s1Si1-000dPK-6j@gemulon.postgresql.org>
<1452995.1714433552@sss.pgh.pa.us>
On 30/04/2024 02:32, Tom Lane wrote:
> Heikki Linnakangas <heikki.linnakangas@iki.fi> writes:
>> Reject SSL connection if ALPN is used but there's no common protocol
>
> A moderately large fraction of the buildfarm doesn't seem to
> recognize SSL_AD_NO_APPLICATION_PROTOCOL.
*sigh*. I checked that it exists on OpenSSL 1.1.1, but according to
buildfarm it's not present on OpenSSL 1.0.2 or LibreSSL. I'll add an
#ifdef guard. OpenSSL 1.0.2 support is about to be removed from master,
and, and we can live with a a poor error message on LibreSSL. It's not
something that users should normally hit.
--
Heikki Linnakangas
Neon (https://neon.tech)
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-committers@postgresql.org
Cc: hlinnaka@iki.fi, tgl@sss.pgh.pa.us, pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: Reject SSL connection if ALPN is used but there's no common prot
In-Reply-To: <adc3ebc2-0e3a-4983-bec1-637182b60aae@iki.fi>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox