Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wL4T6-001VZ6-0F for pgsql-hackers@arkaria.postgresql.org; Thu, 07 May 2026 19:33:08 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wL4T4-005jec-1v for pgsql-hackers@arkaria.postgresql.org; Thu, 07 May 2026 19:33:06 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wL4T4-005jeH-0p for pgsql-hackers@lists.postgresql.org; Thu, 07 May 2026 19:33:06 +0000 Received: from sender4-op-o11.zoho.com ([136.143.188.11]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wL4T1-00000000gq0-01tV for pgsql-hackers@lists.postgresql.org; Thu, 07 May 2026 19:33:05 +0000 ARC-Seal: i=1; a=rsa-sha256; t=1778182373; cv=none; d=zohomail.com; s=zohoarc; b=MhegWR9PM86ApKItTroi59ibW0Znt0Ji82TntA70bXnormTRrT5OkpWjshQ2GU1ShmPexLP3R6XsRmn4Gyw4evxJKL8YnmpsV98hPcJnSEZX7atV7lr5TInngidv241QfjzF64dQxaKULeXyePWqzlDgLU4GjotR5v6BErZueDo= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1778182373; h=Content-Type:Cc:Cc:Date:Date:From:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To; bh=MlkpAMKpxEimpGdvXMdwRPz+EIYh7qURVo+WgkXxwsY=; b=Iy/o+b7ermEw9cpZLF1ac9FczF2bBieQ5LjWLpUwpXZNeL40HrWRdBAb2wzj0Z4hbwqsTjU16M5KruwUGSISy8U1C/mQph+xMthR/nsgLQ/9uS9p25TPwDjq5X+Xt913eiR48RXivouGZcLUjeMGeq9SKlkOhDqP4rnTCX0wIAI= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=highgo.ca; spf=pass smtp.mailfrom=cary.huang@highgo.ca; dmarc=pass header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1778182373; s=zoho; d=highgo.ca; i=cary.huang@highgo.ca; h=Date:Date:From:From:To:To:Cc:Cc:Message-Id:Message-Id:In-Reply-To:References:Subject:Subject:MIME-Version:Content-Type:Reply-To; bh=MlkpAMKpxEimpGdvXMdwRPz+EIYh7qURVo+WgkXxwsY=; b=WLVrWeWtVzuq+7trtgYz1nnrdM8pI3hl7nc8pTvqg6uaBVKjBLa+Q77f6AhfRyf3 nmfIcnpTlx9DiPHmM5jvWGK+GHrSI5xAGBqy8btqPCKyEVIa2wRL/A2/MRZ9my6DlfM C95y3e+YlDlCvJ709RoSBFZdNN9vWaqZkxdgWKAg= Received: from mail.zoho.com by mx.zohomail.com with SMTP id 1778182371107323.1095046217257; Thu, 7 May 2026 12:32:51 -0700 (PDT) Date: Thu, 07 May 2026 12:32:51 -0700 From: Cary Huang To: "Daniel Gustafsson" Cc: "Michael Paquier" , "PostgreSQL-development" Message-Id: <19e03edb6d1.7f49936f6069183.330334679160815231@highgo.ca> In-Reply-To: <65C5DC15-DE27-4D36-8AEE-A854C23B3834@yesql.se> References: <066B07BB-85FA-487C-BE8C-40F791CFC3C4@yesql.se> <65C5DC15-DE27-4D36-8AEE-A854C23B3834@yesql.se> Subject: Re: PostgreSQL and OpenSSL 4.0.0 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_20851584_2147422222.1778182371025" Importance: Medium User-Agent: Zoho Mail X-Mailer: Zoho Mail X-Zoho-Virus-Status: 1 X-Zoho-AV-Stamp: zmail-av-0.2.2.1.5.2/278.150.67 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk ------=_Part_20851584_2147422222.1778182371025 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit Hi I tried the patch and Postgres and sslinfo compiled with no warnings as expected. However, in OpenSSL 4.0, I noticed that it reports certificate revocation errors differently from previous versions, causing the SSL tests to fail. The test expects "ssl alert certificate revoked", but OpenSSL 4.0 returns "tls alert certificate revoked" instead. I made a patch to make the ssl tests compatible with OpenSSL 4.0 as well. thanks! Cary Huang ------------- HighGo Software Inc. (Canada) cary.huang@highgo.ca www.highgo.ca ------=_Part_20851584_2147422222.1778182371025 Content-Type: application/octet-stream; name=0001-fix-ssl-test-on-openssl-4.0.patch Content-Transfer-Encoding: base64 X-ZM_AttachId: 139974751710250280 Content-Disposition: attachment; filename=0001-fix-ssl-test-on-openssl-4.0.patch RnJvbSBmNzNiODdlYTMwMzZmM2NlYmM5YWE0ZjE2ZDQxZTA3ZDdhZjFiMTY2IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBDYXJ5IEh1YW5nIDxoY2FyeTMyOEBnbWFpbC5jb20+CkRhdGU6 IFRodSwgNyBNYXkgMjAyNiAxMjoyNDoyNyAtMDcwMApTdWJqZWN0OiBbUEFUQ0hdIHN1cHBvcnQg T3BlblNTTCA0LjAuMCBzdHlsZSByZXZvY2F0aW9uIG1lc3NhZ2U6Ck1JTUUtVmVyc2lvbjogMS4w CkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50LVRyYW5zZmVy LUVuY29kaW5nOiA4Yml0CgpPcGVuU1NMIDQuMCByZXBvcnRzIHJldm9rZWQgY2VydGlmaWNhdGVz IGFzIOKAnHRscyBhbGVydCBjZXJ0aWZpY2F0ZSByZXZva2Vk4oCdCmluc3RlYWQgb2Yg4oCcc3Ns Li4uIGFsZXJ0IGNlcnRpZmljYXRlIHJldm9rZWTigJ0uIFVwZGF0ZSB0aGUgdGVzdCByZWdleCB0 byBhY2NlcHQKYm90aCB2YXJpYW50cyB0byBhdm9pZCBmYWxzZSBmYWlsdXJlcy4KLS0tCiBzcmMv dGVzdC9zc2wvdC8wMDFfc3NsdGVzdHMucGwgfCA2ICsrKy0tLQogMSBmaWxlIGNoYW5nZWQsIDMg aW5zZXJ0aW9ucygrKSwgMyBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9zcmMvdGVzdC9zc2wv dC8wMDFfc3NsdGVzdHMucGwgYi9zcmMvdGVzdC9zc2wvdC8wMDFfc3NsdGVzdHMucGwKaW5kZXgg MGFmODg3Y2FhNi4uYjEyYWQxZjhkZiAxMDA2NDQKLS0tIGEvc3JjL3Rlc3Qvc3NsL3QvMDAxX3Nz bHRlc3RzLnBsCisrKyBiL3NyYy90ZXN0L3NzbC90LzAwMV9zc2x0ZXN0cy5wbApAQCAtODg1LDcg Kzg4NSw3IEBAICRub2RlLT5jb25uZWN0X2ZhaWxzKAogCSIkY29tbW9uX2Nvbm5zdHIgdXNlcj1z c2x0ZXN0dXNlciBzc2xjZXJ0PXNzbC9jbGllbnQtcmV2b2tlZC5jcnQgIgogCSAgLiBzc2xrZXko J2NsaWVudC1yZXZva2VkLmtleScpLAogCSJjZXJ0aWZpY2F0ZSBhdXRob3JpemF0aW9uIGZhaWxz IHdpdGggcmV2b2tlZCBjbGllbnQgY2VydCIsCi0JZXhwZWN0ZWRfc3RkZXJyID0+IHFyfFNTTCBl cnJvcjogc3NsW2EtejAtOS9dKiBhbGVydCBjZXJ0aWZpY2F0ZSByZXZva2VkfCwKKwlleHBlY3Rl ZF9zdGRlcnIgPT4gcXJ8U1NMIGVycm9yOiAoPzpzc2xcfHRscylbYS16MC05L10qIGFsZXJ0IGNl cnRpZmljYXRlIHJldm9rZWR8LAogCWxvZ19saWtlID0+IFsKIAkJcXJ7Q2xpZW50IGNlcnRpZmlj YXRlIHZlcmlmaWNhdGlvbiBmYWlsZWQgYXQgZGVwdGggMDogY2VydGlmaWNhdGUgcmV2b2tlZH0s CiAJCXFye0ZhaWxlZCBjZXJ0aWZpY2F0ZSBkYXRhIFwodW52ZXJpZmllZFwpOiBzdWJqZWN0ICIv Q049c3NsdGVzdHVzZXIiLCBzZXJpYWwgbnVtYmVyIFxkKywgaXNzdWVyICIvQ049VGVzdCBDQSBm b3IgUG9zdGdyZVNRTCBTU0wgcmVncmVzc2lvbiB0ZXN0IGNsaWVudCBjZXJ0cyJ9LApAQCAtOTg3 LDcgKzk4Nyw3IEBAICRub2RlLT5jb25uZWN0X2ZhaWxzKAogCSIkY29tbW9uX2Nvbm5zdHIgdXNl cj1zc2x0ZXN0dXNlciBzc2xjZXJ0PXNzbC9jbGllbnQtcmV2b2tlZC5jcnQgIgogCSAgLiBzc2xr ZXkoJ2NsaWVudC1yZXZva2VkLmtleScpLAogCSJjZXJ0aWZpY2F0ZSBhdXRob3JpemF0aW9uIGZh aWxzIHdpdGggcmV2b2tlZCBjbGllbnQgY2VydCB3aXRoIHNlcnZlci1zaWRlIENSTCBkaXJlY3Rv cnkiLAotCWV4cGVjdGVkX3N0ZGVyciA9PiBxcnxTU0wgZXJyb3I6IHNzbFthLXowLTkvXSogYWxl cnQgY2VydGlmaWNhdGUgcmV2b2tlZHwsCisJZXhwZWN0ZWRfc3RkZXJyID0+IHFyfFNTTCBlcnJv cjogKD86c3NsXHx0bHMpW2EtejAtOS9dKiBhbGVydCBjZXJ0aWZpY2F0ZSByZXZva2VkfCwKIAls b2dfbGlrZSA9PiBbCiAJCXFye0NsaWVudCBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24gZmFpbGVk IGF0IGRlcHRoIDA6IGNlcnRpZmljYXRlIHJldm9rZWR9LAogCQlxcntGYWlsZWQgY2VydGlmaWNh dGUgZGF0YSBcKHVudmVyaWZpZWRcKTogc3ViamVjdCAiL0NOPXNzbHRlc3R1c2VyIiwgc2VyaWFs IG51bWJlciBcZCssIGlzc3VlciAiL0NOPVRlc3QgQ0EgZm9yIFBvc3RncmVTUUwgU1NMIHJlZ3Jl c3Npb24gdGVzdCBjbGllbnQgY2VydHMifSwKQEAgLTk5OCw3ICs5OTgsNyBAQCAkbm9kZS0+Y29u bmVjdF9mYWlscygKIAkiJGNvbW1vbl9jb25uc3RyIHVzZXI9c3NsdGVzdHVzZXIgc3NsY2VydD1z c2wvY2xpZW50LXJldm9rZWQtdXRmOC5jcnQgIgogCSAgLiBzc2xrZXkoJ2NsaWVudC1yZXZva2Vk LXV0Zjgua2V5JyksCiAJImNlcnRpZmljYXRlIGF1dGhvcml6YXRpb24gZmFpbHMgd2l0aCByZXZv a2VkIFVURi04IGNsaWVudCBjZXJ0IHdpdGggc2VydmVyLXNpZGUgQ1JMIGRpcmVjdG9yeSIsCi0J ZXhwZWN0ZWRfc3RkZXJyID0+IHFyfFNTTCBlcnJvcjogc3NsW2EtejAtOS9dKiBhbGVydCBjZXJ0 aWZpY2F0ZSByZXZva2VkfCwKKwlleHBlY3RlZF9zdGRlcnIgPT4gcXJ8U1NMIGVycm9yOiAoPzpz c2xcfHRscylbYS16MC05L10qIGFsZXJ0IGNlcnRpZmljYXRlIHJldm9rZWR8LAogCWxvZ19saWtl ID0+IFsKIAkJcXJ7Q2xpZW50IGNlcnRpZmljYXRlIHZlcmlmaWNhdGlvbiBmYWlsZWQgYXQgZGVw dGggMDogY2VydGlmaWNhdGUgcmV2b2tlZH0sCiAJCXFye0ZhaWxlZCBjZXJ0aWZpY2F0ZSBkYXRh IFwodW52ZXJpZmllZFwpOiBzdWJqZWN0ICIvQ049XFx4Y2VcXHg5ZlxceGNlXFx4YjRcXHhjZlxc eDg1XFx4Y2ZcXHg4M1xceGNmXFx4ODNcXHhjZVxceGFkXFx4Y2VcXHhiMVxceGNmXFx4ODIiLCBz ZXJpYWwgbnVtYmVyIFxkKywgaXNzdWVyICIvQ049VGVzdCBDQSBmb3IgUG9zdGdyZVNRTCBTU0wg cmVncmVzc2lvbiB0ZXN0IGNsaWVudCBjZXJ0cyJ9LAotLSAKMi4zNC4xCgo= ------=_Part_20851584_2147422222.1778182371025--