Date: Tue, 11 Dec 2018 15:52:40 +0100
From: Pablo Iranzo =?iso-8859-1?Q?G=F3mez?= <Pablo.Iranzo@redhat.com>
To: pgsql-hackers@postgresql.org
Subject: Re: Introducing SNI in TLS handshake for SSL connections
Message-ID: <20181211145240.GL20222@redhat.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="TdMwOTenGjBWB1uY"
Content-Disposition: inline
User-Agent: Mutt/1.10.1 (2018-07-13)
Precedence: bulk


--TdMwOTenGjBWB1uY
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

> On 4/24/17 22:26, Florin Asavoaie wrote:
> > If there's nobody against this, I can try to do the patch myself,
> > doesn't look too difficult (I expect it to simply work by
> > calling SSL_set_tlsext_host_name(SSL_context, PQhost(conn))) somewhere
> > in initialize_SSL in fe-secure-openssl.c.
>=20
> I had to look up what SNI is:
> https://en.wikipedia.org/wiki/Server_Name_Indication
>=20
> This seems useful.
>=20
> If you have a patch, please add it here:
> https://commitfest.postgresql.org/14/
>=20
> --=20
> Peter Eisentraut              http://www.2ndQuadrant.com/
> PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

I came to this old thread while trying to figure out on how to setup postgr=
es replication behind OpenShift/Kubernetes behind a route (which only forwa=
rds 80 or 443 traffic), but could work if SNI is supported on the client us=
ing it.

I haven't found any further follow-up on this, but based on the number of p=
osts and questions on many sites on accessing postgres on OpenShift/Kuberne=
tes it could be something good to have supported.

Any further information or plans?

Thanks,
Pablo


--=20

Pablo Iranzo G=F3mez (Pablo.Iranzo@redhat.com)          GnuPG: 0x5BD8E1E4
Senior Software Engineer - Solutions Engineering           iranzo @ IRC
RHC{A,SS,DS,VA,E,SA,SP,AOSP}, JBCAA        #110-215-852    RHCA Level V

Blog: https://iranzo.github.io                     https://citellus.org

--TdMwOTenGjBWB1uY
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEABEIAB0WIQSMbBIbTuHKBQnMP5gDSCNmW9jh5AUCXA/POAAKCRADSCNmW9jh
5I4XAP4k2j3ov7zOfFQofa9yHjZgSAB+9syXnBsnMG998GOzRAD+M54/kwEcyY0z
9LEsbi3XUA2lQ8KO35bbcKDpcerQqgM=
=Ehd6
-----END PGP SIGNATURE-----

--TdMwOTenGjBWB1uY--