Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uDI6Y-008oDF-HR for pgsql-hackers@arkaria.postgresql.org; Fri, 09 May 2025 07:25:11 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uDI6V-0091JP-Tg for pgsql-hackers@arkaria.postgresql.org; Fri, 09 May 2025 07:25:07 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uDI6V-0091JH-GS for pgsql-hackers@lists.postgresql.org; Fri, 09 May 2025 07:25:07 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uDI6R-000ukq-2l for pgsql-hackers@postgresql.org; Fri, 09 May 2025 07:25:06 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id EAFA4337E84 for ; Fri, 09 May 2025 09:25:00 +0200 (CEST) Received: from s899.loopia.se (unknown [172.22.191.5]) by s807.loopia.se (Postfix) with ESMTP id D727433762F; Fri, 09 May 2025 09:25:00 +0200 (CEST) Received: from s471.loopia.se (unknown [172.22.191.5]) by s899.loopia.se (Postfix) with ESMTP id D20E72C8BAB3; Fri, 09 May 2025 09:25:00 +0200 (CEST) X-Virus-Scanned: amavisd-new at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1.2 X-Spam-Level: X-Spam-Status: No, score=-1.2 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1] autolearn=disabled Authentication-Results: s471.loopia.se (amavisd-new); dkim=pass (2048-bit key) header.d=yesql.se Received: from s899.loopia.se ([172.22.191.6]) by s471.loopia.se (s471.loopia.se [172.22.190.35]) (amavisd-new, port 10024) with LMTP id i0MBbYwSC01l; Fri, 9 May 2025 09:25:00 +0200 (CEST) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 89.255.232.193 Received: from smtpclient.apple (customer-89-255-232-193.stosn.net [89.255.232.193]) (Authenticated sender: daniel@yesql.se) by s899.loopia.se (Postfix) with ESMTPSA id 1D3502C8BABD; Fri, 09 May 2025 09:25:00 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yesql.se; s=loopiadkim1707475645; t=1746775500; bh=hYx5D3z60NRuri5r7uZNERC5j9K5H6sMcUSlce3Waew=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=aiPG9A2k0ROJI674aTZBNsqCiyl7RGj1Wdq2/Ny9LCj3WHod/XieBVfgMiLpYAa+h 1YZ8kERcMq9fdH8mrKS9PQ6M7pnRHvLErpeGkxZ6vUvg0ItUZXentJML8k/um4OXBm eNwr/oC1szdwBUpQ0QNTYqPr4XKrFe8AHnbPYZgXatuu1mG7h9y8iYsIQLI+q9Xf8j QDvOGZG8v0vhLY8VoJYRBLYTjnVOgB6RYKJKsZO9LnYav5D9RC8Gw3V+OSE0F0nGSm WZx8u9an6cgeEzbsyCBpBJouvfWG5bov4P+jxn7aUxFiJ+YfIHJe5+hWHAFgBjV3Bw nljgGE/HRTHwQ== Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.1\)) Subject: Re: disabled SSL log_like tests From: Daniel Gustafsson In-Reply-To: <274033.1746749724@sss.pgh.pa.us> Date: Fri, 9 May 2025 09:24:57 +0200 Cc: Thomas Munro , Andrew Dunstan , PostgreSQL Hackers , Jacob Champion Content-Transfer-Encoding: quoted-printable Message-Id: References: <984fca80-85a8-4c6f-a5cc-bb860950b435@dunslane.net> <2199758.1744901785@sss.pgh.pa.us> <1ce11d3f-624c-4003-a032-1b10cc138305@dunslane.net> <2814408.1745005558@sss.pgh.pa.us> <2859105.1745015195@sss.pgh.pa.us> <1120735.1745350422@sss.pgh.pa.us> <3058990.1746485124@sss.pgh.pa.us> <3227092.1746580691@sss.pgh.pa.us> <3248136.1746592452@sss.pgh.pa.us> <3004EFB2-8FFA-429A-AC5E-E3F40E002A94@yesql.se> <3320404.1746633879@sss.pgh.pa.us> <8E3E58BF-CC99-4C45-9FB8-3BA83AA6FDC8@yesql.se> <51363.1746646179@sss.pgh.pa.us> <8293D36E-8027-4DB8-AB41-5EA2C2A9A788@yesql.se> <80137.1746654871@sss.pgh.pa.us> <182014.1746712177@sss.pgh.pa.us> <2C91E50A-BBBF-4863-8582-6BF2C645CCC1@yesql.se> <222848.1746735871@sss.pgh.pa.us> <58BC3DE1-4D63-4D4E-823F-BE7BF74E272B@yesql.se> <274033.1746749724@sss.pgh.pa.us> To: Tom Lane X-Mailer: Apple Mail (2.3776.700.51.11.1) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > On 9 May 2025, at 02:15, Tom Lane wrote: > Daniel Gustafsson writes: >> If we were to end up with a >> Libressl libtls implementation in libpq we'd still have to test with = Libressl >> against the OpenSSL compat layer in libssl since it could act as = both. Not a >> bridge we have to cross today but might be worth at least keeping in = mind when >> designing something to not make it impossible in the future. >=20 > Right. I think the attached would be amenable to that. It will be a bit awkward to ask "are you libressl" if we ever add = support for something not OpenSSL based, but we could always revisit should that = happen. > Further down the road, it seems inevitable that we'll need to have a > way of detecting the SSL library version --- for example, assuming > the LibreSSL folk eventually fix their RSA-PSS code, we'll need a > version-dependent test. That could be another new backend method, > I guess. Agreed. -- Daniel Gustafsson