Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w2tXJ-000hsG-29 for pgsql-hackers@arkaria.postgresql.org; Wed, 18 Mar 2026 16:14:21 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1w2tXI-00CJzO-0W for pgsql-hackers@arkaria.postgresql.org; Wed, 18 Mar 2026 16:14:20 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w2tXH-00CJyB-2a for pgsql-hackers@lists.postgresql.org; Wed, 18 Mar 2026 16:14:19 +0000 Received: from mail-qv1-xf31.google.com ([2607:f8b0:4864:20::f31]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from ) id 1w2tXD-00000000xay-3UIR for pgsql-hackers@lists.postgresql.org; Wed, 18 Mar 2026 16:14:18 +0000 Received: by mail-qv1-xf31.google.com with SMTP id 6a1803df08f44-899fac9caabso1356456d6.1 for ; Wed, 18 Mar 2026 09:14:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1773850454; cv=none; d=google.com; s=arc-20240605; b=lVHOtYkoffbizGZqoZqoOJw2vYkHQAD1npc5buLO0y45WqIMzSnzHFbaD3NrgsXKvr 0Nwqv1uX27iQQL7TsLfCA4CAxQG+bix8DUG6ZK0C3H+EZ5ilOpy10fBdzjqJnO1BuNEN 5zYbo0gkeasMvx7lbBCFBe84Kl10NIHIhg7ARkDYUjm70ZCdO5AsV8D0RR2O6R5+blh8 Fq+ZLe8e/QQV6RoZpzuJ1FJS2QNKj5N7rVhrQTCtoSzZojwlEaGU1utqr+3Au9l7KKvL hsCsGnNr2HNlwbfTKuvVfnkB9/+PV6gDSudjZxVQPqKJch6zrF23xDWnjwIKGiCQoOea tDCQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=WzTc/wkW7cuHHpexYkphqUrgl3cgixE0vsvKRiDWbnk=; fh=bAvv8rI8+nPPkFoFbs9GQHjqKMorXd8e04nuODwBHUU=; b=cEJsvzTpzuX3JWVAVfeG1myy6ez0JvgKtATGRX4caP7YhZYRob97r9RPN3GJDgf9FP yNlAqEX5tHo2us00Z9Dj9JIFngLFED/eCyCTdLrI8bcIoE2g8Rl51X/lwVjTiPnNQWJE fj9Wk8HX9EMaZmt2blZBQvPND1N8uHQghAxYVL7xKsUW4vpvnxahmcGDkKaiX0lAH4UW iX34AFdYoDZjR/R6C+ClzEsseVyZayh3FALx4oQuKUQnHrrDbPNV4ifpB5UY8/tYU+8o gk4xkJGW9UZ6l2pIXwYOJT4iEVtYcFBsnKxF3sycj9a48Lbc+HJtYyifpK41SCL4hC80 iWSA==; darn=lists.postgresql.org ARC-Authentication-Results: i=1; mx.google.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=enterprisedb.com; s=google; t=1773850454; x=1774455254; darn=lists.postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=WzTc/wkW7cuHHpexYkphqUrgl3cgixE0vsvKRiDWbnk=; b=BtFYhj14wRbX86R0mKO1PIGqGOCOD++Gu+5WeFreuuNQN0ATzWkxvP2tAReYMJl+UJ 6UevFH+QGT09WOuspwCYQQpq1+7AGtVgYVjI5aLot2bIb0F8M4VstLDsQIBc/0XzqtCO 9AgtbaPiZxTYwbqsGiu7c504DswUd2duzRWwH1gyzAOSuzawkqNa5yZ9OGODgqU9ZA3A veL1ib5IoLv4EMqoRcNquFW5677nOzkB3nR3slbWKmK8Ug4Yjo16KMVo8EFACT07O5Iq plOdhU/+OfzOZ7N0+PQhUic5D1i+dodunoSEW97KuQJqNvpXahrA80Dmb1RPz9+rE7/b 4CLA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1773850454; x=1774455254; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=WzTc/wkW7cuHHpexYkphqUrgl3cgixE0vsvKRiDWbnk=; b=Z5+R4pexayh0i50+f6rCS+UY2KJ/cJg0ErgOdxHUQHo93sgZ245SQzojs+Ig0PuObL 4cVa0COIlDI8wpw4dqFi9BazjiJPO9crAgTdTwACD/X8fyYw5HmbC/7I9XyHn8giGi8q UkO3hR0Zq+/SCmif4hb8Tsd077ANtkJ8UVCaz5bjgOGBpa7KBOq8269Ak+T7IERJQ40c voXwGD3BDNT0469jz2yMyyrCkMl2nHlzkMycMtypC+/J9W8jK28GEXTFmGiHC7SMKTY3 VeQRoWTDI/hEHNGnKtbSGB6K85ZlAqA26XOp30EDeSj0SUGXe6e2dEUlk2jBomhLP8bk Sezg== X-Forwarded-Encrypted: i=1; AJvYcCXVKySc0+5EjmbLqHTknB0K3L2cT2NvKp84McozU1oxtt3J1ry2X+ArcFX3mbq8kLhU3f5GauXa08BfKEL0@lists.postgresql.org X-Gm-Message-State: AOJu0Yxp7pFP1mdiK73lbq31I0WtgZ4gJ5ti+2byiXyPo3HqkJmVUkGt RlqCxpeeFeF4kkTgGhEGviu03KXNph3pqhUKTxCcr/sElIDJiX00JeekXskK/2qiRkMToh5kiF9 D1pS/+GG87+DcvqhggeJrjBV7JOOSeEWnGj9Tb0dS X-Gm-Gg: ATEYQzyRHhkA3hxzpZP0eE07GkVzxDOL5K+xe2oSsv9rYnpQA9z66Ejdl9NTs0qxye/ Q6U+7rWP8yMSkOOWybe7zlopiMQrL6/Iug5lCxe9YtOHF1bjvOkQIUeCjmopEUFNRfHpix6ERI2 KMx2Juzh6CPFmvNa05eIFf7e255wOookuOleA2ZshnhXXuv/I8j16Va/vw8FX/mUktVBYmjkAqi DPB32QS2zU7tlj8gsVSNYxDBQKopfq8iXH/MW/TfOTakNxxjtXuT1uofqiShkpftbEjWWaK8mZM TeZRylEnC/1zqGozJibT X-Received: by 2002:a05:6214:5886:b0:89a:258:c1d5 with SMTP id 6a1803df08f44-89c6b58d826mr53995506d6.50.1773850453799; Wed, 18 Mar 2026 09:14:13 -0700 (PDT) MIME-Version: 1.0 References: <88986722-5A72-4DEC-8750-BDBF67FF8C01@yesql.se> <7E77028B-5A3A-436B-9046-8E9992E9F94A@yesql.se> <0BC5B9B1-6503-4563-AAC6-33DEF264AE3F@yesql.se> <80F4F8F4-8E4F-4B6F-866B-D837057C1192@yesql.se> <0C53C316-C24E-4307-807B-D825CA3F7254@yesql.se> <378D83FA-338C-4EA1-BC60-397BE08D0F01@yesql.se> <2025112617144938459246@163.com> <0217DEFA-9684-4A77-A005-D30EBEF155C4@yesql.se> <5D0E78E0-EA79-480E-ABD3-B1EF0156BF8B@yesql.se> <785C0B88-7068-4576-AF55-251D06CEC112@yesql.se> <01412917-C42E-4238-97E2-707C32940DDD@yesql.se> <1C38F269-E552-4F78-9E88-E91CEDB12F35@yesql.se> <23D19F69-A8DE-4F89-99F6-5FC48762CE4D@yesql.se> <561BF011-1626-43A5-BD82-913E67EEBA8B@yesql.se> In-Reply-To: From: Jacob Champion Date: Wed, 18 Mar 2026 09:14:02 -0700 X-Gm-Features: AaiRm50RRW0pA0rEycdXBUzK_81MOxQdvew2Nhl9tJVtE3TEDgky6cDj49ntk8E Message-ID: Subject: Re: Serverside SNI support in libpq To: Daniel Gustafsson Cc: Zsolt Parragi , Jelte Fennema-Nio , Heikki Linnakangas , Dewei Dai , "li.evan.chao" , Michael Paquier , Andres Freund , Pgsql Hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Wed, Mar 18, 2026 at 7:25=E2=80=AFAM Daniel Gustafsson = wrote: > The longfin issue is a bit more odd, I can reproduce it on macOS with Ope= nSSL > 1.1.1 but nowhere else. Rather than reporting an SSL error for aborted > handshake it reports a SYSCALL error. Do you know yet why the handshake is aborted on macOS, as opposed to a polite handshake_failure alert? > The change in the attached diff does fix it for me but I'm > a bit hesitant to apply something like that, I would be more inclined to = the > change the expected output in the test. What are your thoughts? I think that patch might effectively shadow the `else` branch, which is supposed to be reporting the EOF. (I wouldn't mind a better error message than "SYSCALL error: EOF detected", but that's not something this patch did.) --Jacob