Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vTkss-00A1DZ-1c for pgsql-hackers@arkaria.postgresql.org; Thu, 11 Dec 2025 17:55:23 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1vTksr-004vEH-1C for pgsql-hackers@arkaria.postgresql.org; Thu, 11 Dec 2025 17:55:22 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vTkpk-004s9W-0W for pgsql-hackers@lists.postgresql.org; Thu, 11 Dec 2025 17:52:09 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1vTkpi-000Cot-1b for pgsql-hackers@lists.postgresql.org; Thu, 11 Dec 2025 17:52:08 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id E7254509E89 for ; Thu, 11 Dec 2025 18:52:04 +0100 (CET) Received: from s934.loopia.se (unknown [172.22.191.6]) by s807.loopia.se (Postfix) with ESMTP id D0B2F5089B7; Thu, 11 Dec 2025 18:52:04 +0100 (CET) Received: from s473.loopia.se (unknown [172.22.191.6]) by s934.loopia.se (Postfix) with ESMTP id CD3327CEA79; Thu, 11 Dec 2025 18:52:04 +0100 (CET) X-Virus-Scanned: amavisd-new at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1.2 X-Spam-Level: X-Spam-Status: No, score=-1.2 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1] autolearn=disabled Authentication-Results: s473.loopia.se (amavisd-new); dkim=pass (2048-bit key) header.d=yesql.se Received: from s899.loopia.se ([172.22.191.5]) by s473.loopia.se (s473.loopia.se [172.22.190.13]) (amavisd-new, port 10024) with LMTP id 2Jj6UHSrDIv8; Thu, 11 Dec 2025 18:52:04 +0100 (CET) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 212.247.163.6 Received: from smtpclient.apple (static-212-247-163-6.cust.tele2.se [212.247.163.6]) (Authenticated sender: daniel@yesql.se) by s899.loopia.se (Postfix) with ESMTPSA id 381FC2C8B9E7; Thu, 11 Dec 2025 18:52:04 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yesql.se; s=loopiadkim1707475645; t=1765475524; bh=3rpi/HKtJjEBDPYjIbnc3cCVuML9GFoWwDV5pv1VrbY=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=dz/CCeuDZ4DtyX5K4C9eqn+jUR/mGOpXoO2pxQyyG+Zvk6tkQfZnv7GIZ5a7z5SXF qT6MQNX3F3UzZ2Twm7xO+zBxqzEIpPpa22ase8QdlISW8wAGbNVLVPHAcDgikxKcLm etKcXQeartqxS7yka/oqslcz2gsdnqyQkVlYM3XNy3yeG5AYSDSQQM4wlPdsY34K76 5xpd6nWoG5NrcTNqjl0Cn5263PZiGPrYAnHLXujgDNvkchk+vZ7xFLzJbP0yE4vr57 FQMpe2GcsvqI9kvImEEc/5oQDD8tuhKlk4fpOcktNeBwzEea08BZS9CucVcSmhnyN1 M9y4t8Y0cZ3Ng== Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.2\)) Subject: Re: Serverside SNI support in libpq From: Daniel Gustafsson In-Reply-To: Date: Thu, 11 Dec 2025 18:51:53 +0100 Cc: Jelte Fennema-Nio , Heikki Linnakangas , Dewei Dai , "li.evan.chao" , Michael Paquier , Andres Freund , Pgsql Hackers Content-Transfer-Encoding: quoted-printable Message-Id: <9781D76A-A1A1-48FF-9040-EC1A080D7BE8@yesql.se> References: <88986722-5A72-4DEC-8750-BDBF67FF8C01@yesql.se> <7E77028B-5A3A-436B-9046-8E9992E9F94A@yesql.se> <0BC5B9B1-6503-4563-AAC6-33DEF264AE3F@yesql.se> <80F4F8F4-8E4F-4B6F-866B-D837057C1192@yesql.se> <0C53C316-C24E-4307-807B-D825CA3F7254@yesql.se> <378D83FA-338C-4EA1-BC60-397BE08D0F01@yesql.se> <2025112617144938459246@163.com> <0217DEFA-9684-4A77-A005-D30EBEF155C4@yesql.se> <5D0E78E0-EA79-480E-ABD3-B1EF0156BF8B@yesql.se> <785C0B88-7068-4576-AF55-251D06CEC112@yesql.se> To: Jacob Champion X-Mailer: Apple Mail (2.3776.700.51.11.2) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > On 11 Dec 2025, at 18:47, Jacob Champion = wrote: > The new v12 tests still don't pass for me (they all use "certificate > verify failed", but the failure modes should be different). In which version of OpenSSL (or LibreSSL)? -- Daniel Gustafsson