Content-Type: multipart/mixed; boundary="------------YBA0RabJdzuIULhasVVmaXst"
Message-ID: <32e5741d-3dc8-4b15-8c56-cfb26483563c@tantorlabs.com>
Date: Fri, 20 Jun 2025 13:08:35 +0300
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [PoC] Federated Authn/z with OAUTHBEARER
To: Jacob Champion <jacob.champion@enterprisedb.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>,
 lev.nikolaev@tantolabs.com
References: <83C44AB4-24B0-437F-B139-B5CBC5821BB1@yesql.se>
 <CAOYmi+=Pyf9EuR7dRn46ymV-P9fhUft3qH8mqdS-m9ZksmooEg@mail.gmail.com>
 <CAOYmi+mhqahb65y1zXtv60T9=mDYTaepV9b-wq-GHey00zuGOg@mail.gmail.com>
 <CA+hUKGJ+WyJ26QGvO_nkgvbxgw+03U4EQ4Hxw+QBft6Np+XW7w@mail.gmail.com>
 <CAOYmi+mf+hw7x+E3XkRypEGy=yR3n6zowjjXeXaSK20WxX3UGw@mail.gmail.com>
 <CAOYmi+kr-Eh7utEDZBFq8Mc9byLLRF3ZNc0TaHt78SKwB4T5KA@mail.gmail.com>
 <CA+hUKGL3yYmKmNHw1wnpuhCbqaiDw1DDUhghEDrh6y97Ygzw9Q@mail.gmail.com>
 <CAOYmi+kOyST1DoF1WOMQvf75L56LiLHZR2+3qTJ+QCg2KC8raQ@mail.gmail.com>
 <CA+hUKGL59uY=UpCHEmTL6dpzuWJBVf1Kc4bQADYDEWG9ZDCffA@mail.gmail.com>
 <CAOYmi+k6HUMK4XQAfnxsmgs1oPOKnchyj2O2a+R7H9jOTU4LPQ@mail.gmail.com>
 <CA+hUKG+mUfH81RuYm5fJrOxdm85hvxLEm=KxXm+n-12FJJH9jA@mail.gmail.com>
 <CAOYmi+nk-KHGGBHz6BGik4+xHPmyPrwOj3ezSM3F4d=-kH_n2Q@mail.gmail.com>
 <CAOYmi+n4EDOOUL27_OqYT2-F2rS6S+3mK-ppWb2Ec92UEoUbYA@mail.gmail.com>
 <CAOYmi+nGstyp4OyL8SFCm3dtkBzNJqGwL7xYhe85=j2hhaXAMw@mail.gmail.com>
Content-Language: en-US
From: Ivan Kush <ivan.kush@tantorlabs.com>
Organization: Tantor Labs LLC
In-Reply-To: 
 <CAOYmi+nGstyp4OyL8SFCm3dtkBzNJqGwL7xYhe85=j2hhaXAMw@mail.gmail.com>
Archived-At: 
 <https://www.postgresql.org/message-id/32e5741d-3dc8-4b15-8c56-cfb26483563c%40tantorlabs.com>
Precedence: bulk

This is a multi-part message in MIME format.
--------------YBA0RabJdzuIULhasVVmaXst
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hello!

This patch fixes CPPFLAGS, LDFLAGS, LIBS when checking AsyncDNS libcurl=20
support in configure

Custom parameters and paths to libcurl were mistakenly excluded from=20
CPPFLAGS, LDFLAGS, and LIBS, although AsyncDNS check was OK.

For example, the command `pkg-config --libs libcurl` gives=20
`-L/usr/local/lib -lcurl`. LDFLAGS will not contain `-L/usr/local/lib`.

This patch fixes such behaviour.


Test case:

I've tested custom Postgres in an old Debian based Linux distro. This=20
distro contains old libcurl (< 7.61, package libcurl3) that was compiled=20
with symbols CURL_OPENSSL_3. So I've installed newer version of=20
libcurlssl, package libcurl4-openssl-dev, that contains symbols=20
CURL_OPENSSL_4 and compiled my libcurl version > 7.61.

After compilation during testing some Postgres shared libraries or=20
binaries that was linked with libcurl showed an error "version=20
CURL_OPENSSL_3 not found (required by =E2=80=A6/libcurl.so.4)"

--=20
Best wishes,
Ivan Kush
Tantor Labs LLC

--------------YBA0RabJdzuIULhasVVmaXst
Content-Type: text/x-patch; charset=UTF-8; name="0001_oauth_
 Fix_CPPFLAGS,_LDFLAGS,_LIBS_when_checking_AsyncDNS_libcurl_support.patch"
Content-Disposition: attachment; filename*0="0001_oauth_
 Fix_CPPFLAGS,_LDFLAGS,_LIBS_when_checking_AsyncD";
 filename*1="NS_libcurl_support.patch"
Content-Transfer-Encoding: base64
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--------------YBA0RabJdzuIULhasVVmaXst--