Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wL4Zm-001VcU-0f for pgsql-hackers@arkaria.postgresql.org; Thu, 07 May 2026 19:40:02 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wL4Zl-005oAP-0M for pgsql-hackers@arkaria.postgresql.org; Thu, 07 May 2026 19:40:01 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wL4Zk-005oAH-2N for pgsql-hackers@lists.postgresql.org; Thu, 07 May 2026 19:40:00 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wL4Zi-00000001497-2vFx for pgsql-hackers@lists.postgresql.org; Thu, 07 May 2026 19:40:00 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id B817F5D9F98 for ; Thu, 07 May 2026 21:39:57 +0200 (CEST) Received: from s981.loopia.se (unknown [172.22.191.6]) by s807.loopia.se (Postfix) with ESMTP id A467C5D90AF; Thu, 07 May 2026 21:39:57 +0200 (CEST) Received: from localhost (unknown [172.22.191.6]) by s981.loopia.se (Postfix) with ESMTP id A185F22B1682; Thu, 07 May 2026 21:39:57 +0200 (CEST) X-Virus-Scanned: amavis at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1.2 X-Spam-Level: X-Spam-Status: No, score=-1.2 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1] autolearn=disabled Authentication-Results: s471.loopia.se (amavis); dkim=pass (2048-bit key) header.d=yesql.se Received: from s980.loopia.se ([172.22.191.5]) by localhost (s471.loopia.se [172.22.190.35]) (amavis, port 10024) with LMTP id cdEWDRYNDatU; Thu, 7 May 2026 21:39:57 +0200 (CEST) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 89.255.232.236 Received: from smtpclient.apple (customer-89-255-232-236.stosn.net [89.255.232.236]) (Authenticated sender: daniel@yesql.se) by s980.loopia.se (Postfix) with ESMTPSA id 1978D220164B; Thu, 07 May 2026 21:39:57 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yesql.se; s=loopiadkim1707475645; t=1778182797; bh=BTnAwC0VK2gwYJeT7XQiliMt7j16EaFF3oLi6oFXYf4=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=dwIsrs8W9B9a07dQpVfosZJSZTg1s7Tv1D/INpi9uj0TAlIHBVXfLR1VjfNH5pYm0 1QZcZQKkCcEcqM2EOhJGwggcSQ9AK6XAAV36iXnxYmoreUdOBvaQHeccstXy3QEL7B 5IXOWCVbl3V7x+Hdh7p5oOQ3AqeOZcN0j6WyfcZDzIsyBl05dGp+kHcVPAUQhxHDmC +EynCveS3CtH1j3/k+F+SLOhvyvmNW6gQ+zvxLwbJZtiIewdlUEXch6w+T0mdfUpFk tWYtOWS4Wvr6jYMGRE++9Sb7SD04Ymh7GcIdK0JCiRTrKNaEvOsiedvRH3rH/8YjCM ea2YTfafDXKTA== Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.2\)) Subject: Re: PostgreSQL and OpenSSL 4.0.0 From: Daniel Gustafsson In-Reply-To: <19e03edb6d1.7f49936f6069183.330334679160815231@highgo.ca> Date: Thu, 7 May 2026 21:39:44 +0200 Cc: Michael Paquier , PostgreSQL-development Content-Transfer-Encoding: 7bit Message-Id: References: <066B07BB-85FA-487C-BE8C-40F791CFC3C4@yesql.se> <65C5DC15-DE27-4D36-8AEE-A854C23B3834@yesql.se> <19e03edb6d1.7f49936f6069183.330334679160815231@highgo.ca> To: Cary Huang X-Mailer: Apple Mail (2.3776.700.51.11.2) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > On 7 May 2026, at 21:32, Cary Huang wrote: > I tried the patch and Postgres and sslinfo compiled with no warnings as > expected. Thanks for looking! > However, in OpenSSL 4.0, I noticed that it reports certificate revocation > errors differently from previous versions, causing the SSL tests to fail. > The test expects "ssl alert certificate revoked", but OpenSSL 4.0 returns > "tls alert certificate revoked" instead. Which version of the patch did you try? I thought I had fixed that in the patchset I posted earlier today but perhaps I missed some parts. -- Daniel Gustafsson