Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lMqoJ-0005zo-GI for pgsql-hackers@arkaria.postgresql.org; Thu, 18 Mar 2021 11:27:27 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lMqoI-000762-2k for pgsql-hackers@arkaria.postgresql.org; Thu, 18 Mar 2021 11:27:26 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lMqoH-00075p-37 for pgsql-hackers@lists.postgresql.org; Thu, 18 Mar 2021 11:27:25 +0000 Received: from [66.111.4.239] (helo=forward5-smtp.messagingengine.com) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lMqoA-0006rQ-M5 for pgsql-hackers@postgresql.org; Thu, 18 Mar 2021 11:27:24 +0000 Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailforward.nyi.internal (Postfix) with ESMTP id 94A781940E0E; Thu, 18 Mar 2021 07:27:06 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute6.internal (MEProxy); Thu, 18 Mar 2021 07:27:06 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=8N9Qxv EKMxURE/YTNP1z3rAbWUnCQ7kPURuwU1/ItaY=; b=pGHqnZWmmU94c6mOODps2t ERvWwMClbfIP43nsAKPhNkiW1VxMOmcsAVZ/OrZkCd5GNNDo3ot8B1sJcjo8TTFn dv/41NNbV+3jmytLoAsNg8aLz9aISWU4UiJeWWKJU6vwAVgpmcOzON2hfXLqVOjr k5/Ik1IISjKvYj6x3NQckOrvDbpxjMLmek24g4Muby2cVORqn/L0VhUShRNdeL/j KFRmDfJKIfn/jaHKdVQGUWMWhjbsS7HE1v13rkflPvHrXaSnb4kBhstVlgGc4xcg CUo/dx1WWwNA2pOUjxbVpPeLUu+WAao1b34QqPa50j4TDOJS5N1n5B6BSEd9fTCg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrudefiedgvdelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepuffvfhfhkffffgggjggtsehmtderredtfeejnecuhfhrohhmpefrvghtvghr ucfgihhsvghnthhrrghuthcuoehpvghtvghrrdgvihhsvghnthhrrghuthesvghnthgvrh hprhhishgvuggsrdgtohhmqeenucggtffrrghtthgvrhhnpeffvdfhiedvhedutdeihfdt keevfffhkeejudehieeuveegkefggfeiteefhfdtudenucfkphepkeejrddujeejrdeile drudegtdenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhm pehpvghtvghrrdgvihhsvghnthhrrghuthesvghnthgvrhhprhhishgvuggsrdgtohhm X-ME-Proxy: Received: from laptop206oxuk.local (p57b1458c.dip0.t-ipconnect.de [87.177.69.140]) by mail.messagingengine.com (Postfix) with ESMTPA id 226A6240067; Thu, 18 Mar 2021 07:27:05 -0400 (EDT) Subject: Re: SSL SNI To: "pgsql-hackers@postgresql.org" References: <7289d5eb-62a5-a732-c3b9-438cee2cb709@enterprisedb.com> <9407b344-7342-b2b7-004f-d5250687be42@enterprisedb.com> From: Peter Eisentraut Cc: Jacob Champion Message-ID: <4eaa2b56-c3d0-67b6-4716-010d001c7601@enterprisedb.com> Date: Thu, 18 Mar 2021 12:27:02 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:78.0) Gecko/20100101 Thunderbird/78.8.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/mixed; boundary="------------063FAB3797FB36D19C39B654" Content-Language: en-US X-Host-Lookup-Failed: Reverse DNS lookup failed for 66.111.4.239 (deferred) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is a multi-part message in MIME format. --------------063FAB3797FB36D19C39B654 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit On 25.02.21 19:36, Jacob Champion wrote: > On Thu, 2021-02-25 at 17:00 +0100, Peter Eisentraut wrote: >> Just as additional data points, it has come to my attention that both >> the Go driver ("lib/pq") and the JDBC environment already send SNI >> automatically. (In the case of JDBC this is done by the Java system >> libraries, not the JDBC driver implementation.) > > For the Go case it's only for sslmode=verify-full, and only because the > Go standard library implementation does it for you automatically if you > request the builtin server hostname validation. (I checked both lib/pq > and its de facto replacement, jackc/pgx.) So it may not be something > that was done on purpose by the driver implementation. Here is a new patch with an option to turn it off, and some documentation added. --------------063FAB3797FB36D19C39B654 Content-Type: text/plain; charset=UTF-8; x-mac-type="0"; x-mac-creator="0"; name="v3-0001-libpq-Set-Server-Name-Indication-SNI-for-SSL-conn.patch" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename*0="v3-0001-libpq-Set-Server-Name-Indication-SNI-for-SSL-conn.pa"; filename*1="tch" RnJvbSA1MGJjMTBkMTEwMTg4ODNhZDdhNTU1ZTkwMjMxYjZlZjE2ZTNmZGY2IE1vbiBTZXAg MTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBQZXRlciBFaXNlbnRyYXV0IDxwZXRlckBlaXNlbnRy YXV0Lm9yZz4KRGF0ZTogVGh1LCAxOCBNYXIgMjAyMSAxMjoyNToxMyArMDEwMApTdWJqZWN0 OiBbUEFUQ0ggdjNdIGxpYnBxOiBTZXQgU2VydmVyIE5hbWUgSW5kaWNhdGlvbiAoU05JKSBm b3IgU1NMCiBjb25uZWN0aW9ucwoKQnkgZGVmYXVsdCwgaGF2ZSBsaWJwcSBzZXQgdGhlIFRM UyBleHRlbnNpb24gIlNlcnZlciBOYW1lIEluZGljYXRpb24iIChTTkkpLgoKVGhpcyBhbGxv d3MgYW4gU05JLWF3YXJlIFNTTCBwcm94eSB0byByb3V0ZSBjb25uZWN0aW9ucy4gIChUaGlz CnJlcXVpcmVzIGEgcHJveHkgdGhhdCBpcyBhd2FyZSBvZiB0aGUgUG9zdGdyZVNRTCBwcm90 b2NvbCwgbm90IGp1c3QKYW55IFNTTCBwcm94eS4pCgpJbiB0aGUgZnV0dXJlLCB0aGlzIGNv dWxkIGFsc28gYWxsb3cgdGhlIHNlcnZlciB0byB1c2UgZGlmZmVyZW50IFNTTApjZXJ0aWZp Y2F0ZXMgZm9yIGRpZmZlcmVudCBob3N0IHNwZWNpZmljYXRpb25zLiAgKFRoYXQgd291bGQg cmVxdWlyZQpuZXcgc2VydmVyIGZ1bmN0aW9uYWxpdHkuICBUaGlzIHdvdWxkIGJlIHRoZSBj bGllbnQtc2lkZSBmdW5jdGlvbmFsaXR5CmZvciB0aGF0LikKClNpbmNlIFNOSSBtYWtlcyB0 aGUgaG9zdCBuYW1lIGFwcGVhciBpbiBjbGVhcnRleHQgaW4gdGhlIG5ldHdvcmsKdHJhZmZp YywgdGhpcyBtaWdodCBiZSB1bmRlc2lyYWJsZSBpbiBzb21lIGNhc2VzLiAgVGhlcmVmb3Jl LCBhbHNvIGFkZAphIGxpYnBxIGNvbm5lY3Rpb24gb3B0aW9uICJzc2xzbmkiIHRvIHR1cm4g aXQgb2ZmLgoKRGlzY3Vzc2lvbjogaHR0cHM6Ly93d3cucG9zdGdyZXNxbC5vcmcvbWVzc2Fn ZS1pZC9mbGF0LzcyODlkNWViLTYyYTUtYTczMi1jM2I5LTQzOGNlZTJjYjcwOSU0MGVudGVy cHJpc2VkYi5jb20KLS0tCiAuLi4vcG9zdGdyZXNfZmR3L2V4cGVjdGVkL3Bvc3RncmVzX2Zk dy5vdXQgICAgfCAgMiArLQogZG9jL3NyYy9zZ21sL2xpYnBxLnNnbWwgICAgICAgICAgICAg ICAgICAgICAgIHwgMzEgKysrKysrKysrKysrKysrKysrKwogc3JjL2ludGVyZmFjZXMvbGli cHEvZmUtY29ubmVjdC5jICAgICAgICAgICAgIHwgIDYgKysrKwogc3JjL2ludGVyZmFjZXMv bGlicHEvZmUtc2VjdXJlLW9wZW5zc2wuYyAgICAgIHwgMjIgKysrKysrKysrKysrKwogc3Jj L2ludGVyZmFjZXMvbGlicHEvbGlicHEtaW50LmggICAgICAgICAgICAgIHwgIDEgKwogNSBm aWxlcyBjaGFuZ2VkLCA2MSBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZmIC0t Z2l0IGEvY29udHJpYi9wb3N0Z3Jlc19mZHcvZXhwZWN0ZWQvcG9zdGdyZXNfZmR3Lm91dCBi L2NvbnRyaWIvcG9zdGdyZXNfZmR3L2V4cGVjdGVkL3Bvc3RncmVzX2Zkdy5vdXQKaW5kZXgg MDY0OWI2YjgxYy4uZDA0MDVjZjRhNyAxMDA2NDQKLS0tIGEvY29udHJpYi9wb3N0Z3Jlc19m ZHcvZXhwZWN0ZWQvcG9zdGdyZXNfZmR3Lm91dAorKysgYi9jb250cmliL3Bvc3RncmVzX2Zk dy9leHBlY3RlZC9wb3N0Z3Jlc19mZHcub3V0CkBAIC04OTQ2LDcgKzg5NDYsNyBAQCBETyAk ZCQKICAgICBFTkQ7CiAkZCQ7CiBFUlJPUjogIGludmFsaWQgb3B0aW9uICJwYXNzd29yZCIK LUhJTlQ6ICBWYWxpZCBvcHRpb25zIGluIHRoaXMgY29udGV4dCBhcmU6IHNlcnZpY2UsIHBh c3NmaWxlLCBjaGFubmVsX2JpbmRpbmcsIGNvbm5lY3RfdGltZW91dCwgZGJuYW1lLCBob3N0 LCBob3N0YWRkciwgcG9ydCwgb3B0aW9ucywgYXBwbGljYXRpb25fbmFtZSwga2VlcGFsaXZl cywga2VlcGFsaXZlc19pZGxlLCBrZWVwYWxpdmVzX2ludGVydmFsLCBrZWVwYWxpdmVzX2Nv dW50LCB0Y3BfdXNlcl90aW1lb3V0LCBzc2xtb2RlLCBzc2xjb21wcmVzc2lvbiwgc3NsY2Vy dCwgc3Nsa2V5LCBzc2xyb290Y2VydCwgc3NsY3JsLCBzc2xjcmxkaXIsIHJlcXVpcmVwZWVy LCBzc2xfbWluX3Byb3RvY29sX3ZlcnNpb24sIHNzbF9tYXhfcHJvdG9jb2xfdmVyc2lvbiwg Z3NzZW5jbW9kZSwga3Jic3J2bmFtZSwgZ3NzbGliLCB0YXJnZXRfc2Vzc2lvbl9hdHRycywg dXNlX3JlbW90ZV9lc3RpbWF0ZSwgZmR3X3N0YXJ0dXBfY29zdCwgZmR3X3R1cGxlX2Nvc3Qs IGV4dGVuc2lvbnMsIHVwZGF0YWJsZSwgZmV0Y2hfc2l6ZSwgYmF0Y2hfc2l6ZQorSElOVDog IFZhbGlkIG9wdGlvbnMgaW4gdGhpcyBjb250ZXh0IGFyZTogc2VydmljZSwgcGFzc2ZpbGUs IGNoYW5uZWxfYmluZGluZywgY29ubmVjdF90aW1lb3V0LCBkYm5hbWUsIGhvc3QsIGhvc3Rh ZGRyLCBwb3J0LCBvcHRpb25zLCBhcHBsaWNhdGlvbl9uYW1lLCBrZWVwYWxpdmVzLCBrZWVw YWxpdmVzX2lkbGUsIGtlZXBhbGl2ZXNfaW50ZXJ2YWwsIGtlZXBhbGl2ZXNfY291bnQsIHRj cF91c2VyX3RpbWVvdXQsIHNzbG1vZGUsIHNzbGNvbXByZXNzaW9uLCBzc2xjZXJ0LCBzc2xr ZXksIHNzbHJvb3RjZXJ0LCBzc2xjcmwsIHNzbGNybGRpciwgc3Nsc25pLCByZXF1aXJlcGVl ciwgc3NsX21pbl9wcm90b2NvbF92ZXJzaW9uLCBzc2xfbWF4X3Byb3RvY29sX3ZlcnNpb24s IGdzc2VuY21vZGUsIGtyYnNydm5hbWUsIGdzc2xpYiwgdGFyZ2V0X3Nlc3Npb25fYXR0cnMs IHVzZV9yZW1vdGVfZXN0aW1hdGUsIGZkd19zdGFydHVwX2Nvc3QsIGZkd190dXBsZV9jb3N0 LCBleHRlbnNpb25zLCB1cGRhdGFibGUsIGZldGNoX3NpemUsIGJhdGNoX3NpemUKIENPTlRF WFQ6ICBTUUwgc3RhdGVtZW50ICJBTFRFUiBTRVJWRVIgbG9vcGJhY2tfbm9wdyBPUFRJT05T IChBREQgcGFzc3dvcmQgJ2R1bW15cHcnKSIKIFBML3BnU1FMIGZ1bmN0aW9uIGlubGluZV9j b2RlX2Jsb2NrIGxpbmUgMyBhdCBFWEVDVVRFCiAtLSBJZiB3ZSBhZGQgYSBwYXNzd29yZCBm b3Igb3VyIHVzZXIgbWFwcGluZyBpbnN0ZWFkLCB3ZSBzaG91bGQgZ2V0IGEgZGlmZmVyZW50 CmRpZmYgLS1naXQgYS9kb2Mvc3JjL3NnbWwvbGlicHEuc2dtbCBiL2RvYy9zcmMvc2dtbC9s aWJwcS5zZ21sCmluZGV4IGJlNjc0ZmJhYTkuLmRiZmM3YWRkMTQgMTAwNjQ0Ci0tLSBhL2Rv Yy9zcmMvc2dtbC9saWJwcS5zZ21sCisrKyBiL2RvYy9zcmMvc2dtbC9saWJwcS5zZ21sCkBA IC0xNzc3LDYgKzE3NzcsMjcgQEAgPHRpdGxlPlBhcmFtZXRlciBLZXkgV29yZHM8L3RpdGxl PgogICAgICAgPC9saXN0aXRlbT4KICAgICAgPC92YXJsaXN0ZW50cnk+CiAKKyAgICAgPHZh cmxpc3RlbnRyeSBpZD0ibGlicHEtY29ubmVjdC1zc2xzbmkiIHhyZWZsYWJlbD0ic3Nsc25p Ij4KKyAgICAgIDx0ZXJtPjxsaXRlcmFsPnNzbHNuaTwvbGl0ZXJhbD48aW5kZXh0ZXJtPjxw cmltYXJ5PlNlcnZlciBOYW1lIEluZGljYXRpb248L3ByaW1hcnk+PC9pbmRleHRlcm0+PC90 ZXJtPgorICAgICAgPGxpc3RpdGVtPgorICAgICAgIDxwYXJhPgorICAgICAgICBCeSBkZWZh dWx0LCBsaWJwcSBzZXRzIHRoZSBUTFMgZXh0ZW5zaW9uIDxxdW90ZT5TZXJ2ZXIgTmFtZQor ICAgICAgICBJbmRpY2F0aW9uPC9xdW90ZT4gKFNOSSkgb24gU1NMLWVuYWJsZWQgY29ubmVj dGlvbnMuICBTZWUgPHVsaW5rCisgICAgICAgIHVybD0iaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL3JmYzYwNjYjc2VjdGlvbi0zIj5SRkMgNjA2NjwvdWxpbms+CisgICAgICAgIGZv ciBkZXRhaWxzLiAgQnkgc2V0dGluZyB0aGlzIHBhcmFtZXRlciB0byAwLCB0aGlzIGlzIHR1 cm5lZCBvZmYuCisgICAgICAgPC9wYXJhPgorCisgICAgICAgPHBhcmE+CisgICAgICAgIFRo ZSBTZXJ2ZXIgTmFtZSBJbmRpY2F0aW9uIGNhbiBiZSB1c2VkIGJ5IFNTTC1hd2FyZSBwcm94 aWVzIHRvIHJvdXRlCisgICAgICAgIGNvbm5lY3Rpb25zIHdpdGhvdXQgaGF2aW5nIHRvIGRl Y3J5cHQgdGhlIFNTTCBzdHJlYW0uICAoTm90ZSB0aGF0IHRoaXMKKyAgICAgICAgcmVxdWly ZXMgYSBwcm94eSB0aGF0IGlzIGF3YXJlIG9mIHRoZSBQb3N0Z3JlU1FMIHByb3RvY29sIGhh bmRzaGFrZSwKKyAgICAgICAgbm90IGp1c3QgYW55IFNTTCBwcm94eS4pICBIb3dldmVyLCBT TkkgbWFrZXMgdGhlIGRlc3RpbmF0aW9uIGhvc3QgbmFtZQorICAgICAgICBhcHBlYXIgaW4g Y2xlYXJ0ZXh0IGluIHRoZSBuZXR3b3JrIHRyYWZmaWMsIHNvIGl0IG1pZ2h0IGJlIHVuZGVz aXJhYmxlCisgICAgICAgIGluIHNvbWUgY2FzZXMuCisgICAgICAgPC9wYXJhPgorICAgICAg PC9saXN0aXRlbT4KKyAgICAgPC92YXJsaXN0ZW50cnk+CisKICAgICAgPHZhcmxpc3RlbnRy eSBpZD0ibGlicHEtY29ubmVjdC1yZXF1aXJlcGVlciIgeHJlZmxhYmVsPSJyZXF1aXJlcGVl ciI+CiAgICAgICA8dGVybT48bGl0ZXJhbD5yZXF1aXJlcGVlcjwvbGl0ZXJhbD48L3Rlcm0+ CiAgICAgICA8bGlzdGl0ZW0+CkBAIC03NzU3LDYgKzc3NzgsMTYgQEAgPHRpdGxlPkVudmly b25tZW50IFZhcmlhYmxlczwvdGl0bGU+CiAgICAgIDwvcGFyYT4KICAgICA8L2xpc3RpdGVt PgogCisgICAgPGxpc3RpdGVtPgorICAgICA8cGFyYT4KKyAgICAgIDxpbmRleHRlcm0+Cisg ICAgICAgPHByaW1hcnk+PGVudmFyPlBHU1NMU05JPC9lbnZhcj48L3ByaW1hcnk+CisgICAg ICA8L2luZGV4dGVybT4KKyAgICAgIDxlbnZhcj5QR1NTTFNOSTwvZW52YXI+ICBiZWhhdmVz IHRoZSBzYW1lIGFzIHRoZSA8eHJlZgorICAgICAgbGlua2VuZD0ibGlicHEtY29ubmVjdC1z c2xzbmkiLz4gY29ubmVjdGlvbiBwYXJhbWV0ZXIuCisgICAgIDwvcGFyYT4KKyAgICA8L2xp c3RpdGVtPgorCiAgICAgPGxpc3RpdGVtPgogICAgICA8cGFyYT4KICAgICAgIDxpbmRleHRl cm0+CmRpZmYgLS1naXQgYS9zcmMvaW50ZXJmYWNlcy9saWJwcS9mZS1jb25uZWN0LmMgYi9z cmMvaW50ZXJmYWNlcy9saWJwcS9mZS1jb25uZWN0LmMKaW5kZXggNTNiMzU0YWJiMi4uZjE1 NTFlNzk2YyAxMDA2NDQKLS0tIGEvc3JjL2ludGVyZmFjZXMvbGlicHEvZmUtY29ubmVjdC5j CisrKyBiL3NyYy9pbnRlcmZhY2VzL2xpYnBxL2ZlLWNvbm5lY3QuYwpAQCAtMzAzLDYgKzMw MywxMCBAQCBzdGF0aWMgY29uc3QgaW50ZXJuYWxQUWNvbm5pbmZvT3B0aW9uIFBRY29ubmlu Zm9PcHRpb25zW10gPSB7CiAJCSJTU0wtUmV2b2NhdGlvbi1MaXN0LURpciIsICIiLCA2NCwK IAlvZmZzZXRvZihzdHJ1Y3QgcGdfY29ubiwgc3NsY3JsZGlyKX0sCiAKKwl7InNzbHNuaSIs ICJQR1NTTFNOSSIsICIxIiwgTlVMTCwKKwkJIlNTTC1TTkkiLCAiIiwgMSwKKwlvZmZzZXRv ZihzdHJ1Y3QgcGdfY29ubiwgc3Nsc25pKX0sCisKIAl7InJlcXVpcmVwZWVyIiwgIlBHUkVR VUlSRVBFRVIiLCBOVUxMLCBOVUxMLAogCQkiUmVxdWlyZS1QZWVyIiwgIiIsIDEwLAogCW9m ZnNldG9mKHN0cnVjdCBwZ19jb25uLCByZXF1aXJlcGVlcil9LApAQCAtNDA5NCw2ICs0MDk4 LDggQEAgZnJlZVBHY29ubihQR2Nvbm4gKmNvbm4pCiAJCWZyZWUoY29ubi0+c3NsY3JsZGly KTsKIAlpZiAoY29ubi0+c3NsY29tcHJlc3Npb24pCiAJCWZyZWUoY29ubi0+c3NsY29tcHJl c3Npb24pOworCWlmIChjb25uLT5zc2xzbmkpCisJCWZyZWUoY29ubi0+c3Nsc25pKTsKIAlp ZiAoY29ubi0+cmVxdWlyZXBlZXIpCiAJCWZyZWUoY29ubi0+cmVxdWlyZXBlZXIpOwogCWlm IChjb25uLT5zc2xfbWluX3Byb3RvY29sX3ZlcnNpb24pCmRpZmYgLS1naXQgYS9zcmMvaW50 ZXJmYWNlcy9saWJwcS9mZS1zZWN1cmUtb3BlbnNzbC5jIGIvc3JjL2ludGVyZmFjZXMvbGli cHEvZmUtc2VjdXJlLW9wZW5zc2wuYwppbmRleCA5YzIyMjJjMWQxLi42ZjM1N2RmYmZlIDEw MDY0NAotLS0gYS9zcmMvaW50ZXJmYWNlcy9saWJwcS9mZS1zZWN1cmUtb3BlbnNzbC5jCisr KyBiL3NyYy9pbnRlcmZhY2VzL2xpYnBxL2ZlLXNlY3VyZS1vcGVuc3NsLmMKQEAgLTEwODIs NiArMTA4MiwyOCBAQCBpbml0aWFsaXplX1NTTChQR2Nvbm4gKmNvbm4pCiAJU1NMX0NUWF9m cmVlKFNTTF9jb250ZXh0KTsKIAlTU0xfY29udGV4dCA9IE5VTEw7CiAKKwkvKgorCSAqIFNl dCBTZXJ2ZXIgTmFtZSBJbmRpY2F0aW9uIChTTkkpLCBpZiBlbmFibGVkIGJ5IGNvbm5lY3Rp b24gcGFyYW1ldGVycy4KKwkgKiBQZXIgUkZDIDYwNjYsIGRvIG5vdCBzZXQgaXQgaWYgdGhl IGhvc3QgaXMgYSBsaXRlcmFsIElQIGFkZHJlc3MgKElQdjQKKwkgKiBvciBJUHY2KS4KKwkg Ki8KKwlpZiAoY29ubi0+c3Nsc25pICYmIGNvbm4tPnNzbHNuaVswXSAmJgorCQkhKHN0cnNw bihjb25uLT5wZ2hvc3QsICIwMTIzNDU2Nzg5LiIpID09IHN0cmxlbihjb25uLT5wZ2hvc3Qp IHx8CisJCSAgc3RyY2hyKGNvbm4tPnBnaG9zdCwgJzonKSkpCisJeworCQlpZiAoU1NMX3Nl dF90bHNleHRfaG9zdF9uYW1lKGNvbm4tPnNzbCwgY29ubi0+cGdob3N0KSAhPSAxKQorCQl7 CisJCQljaGFyCSAgICplcnIgPSBTU0xlcnJtZXNzYWdlKEVSUl9nZXRfZXJyb3IoKSk7CisK KwkJCWFwcGVuZFBRRXhwQnVmZmVyKCZjb25uLT5lcnJvck1lc3NhZ2UsCisJCQkJCQkJICBs aWJwcV9nZXR0ZXh0KCJjb3VsZCBub3Qgc2V0IFNTTCBTZXJ2ZXIgTmFtZSBJbmRpY2F0aW9u IChTTkkpOiAlc1xuIiksCisJCQkJCQkJICBlcnIpOworCQkJU1NMZXJyZnJlZShlcnIpOwor CQkJU1NMX0NUWF9mcmVlKFNTTF9jb250ZXh0KTsKKwkJCXJldHVybiAtMTsKKwkJfQorCX0K KwogCS8qCiAJICogUmVhZCB0aGUgU1NMIGtleS4gSWYgYSBrZXkgaXMgc3BlY2lmaWVkLCB0 cmVhdCBpdCBhcyBhbiBlbmdpbmU6a2V5CiAJICogY29tYmluYXRpb24gaWYgdGhlcmUgaXMg Y29sb24gcHJlc2VudCAtIHdlIGRvbid0IHN1cHBvcnQgZmlsZXMgd2l0aApkaWZmIC0tZ2l0 IGEvc3JjL2ludGVyZmFjZXMvbGlicHEvbGlicHEtaW50LmggYi9zcmMvaW50ZXJmYWNlcy9s aWJwcS9saWJwcS1pbnQuaAppbmRleCA2Mzc0ZWM2NTdhLi4yNGJkMTIwOWEwIDEwMDY0NAot LS0gYS9zcmMvaW50ZXJmYWNlcy9saWJwcS9saWJwcS1pbnQuaAorKysgYi9zcmMvaW50ZXJm YWNlcy9saWJwcS9saWJwcS1pbnQuaApAQCAtMzgzLDYgKzM4Myw3IEBAIHN0cnVjdCBwZ19j b25uCiAJY2hhcgkgICAqc3Nscm9vdGNlcnQ7CS8qIHJvb3QgY2VydGlmaWNhdGUgZmlsZW5h bWUgKi8KIAljaGFyCSAgICpzc2xjcmw7CQkJLyogY2VydGlmaWNhdGUgcmV2b2NhdGlvbiBs aXN0IGZpbGVuYW1lICovCiAJY2hhcgkgICAqc3NsY3JsZGlyOwkJLyogY2VydGlmaWNhdGUg cmV2b2NhdGlvbiBsaXN0IGRpcmVjdG9yeSBuYW1lICovCisJY2hhcgkgICAqc3Nsc25pOwkJ CS8qIHVzZSBTU0wgU05JIGV4dGVuc2lvbiAoMCBvciAxKSAqLwogCWNoYXIJICAgKnJlcXVp cmVwZWVyOwkvKiByZXF1aXJlZCBwZWVyIGNyZWRlbnRpYWxzIGZvciBsb2NhbCBzb2NrZXRz ICovCiAJY2hhcgkgICAqZ3NzZW5jbW9kZTsJCS8qIEdTUyBtb2RlIChyZXF1aXJlLHByZWZl cixkaXNhYmxlKSAqLwogCWNoYXIJICAgKmtyYnNydm5hbWU7CQkvKiBLZXJiZXJvcyBzZXJ2 aWNlIG5hbWUgKi8KCmJhc2UtY29tbWl0OiBlZDYyZDM3MzdjMWI4MjNmNzk2ZDk3NDA2MGIx ZDAyOTVhM2RkODMxCi0tIAoyLjMwLjIKCg== --------------063FAB3797FB36D19C39B654--