Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s1Po5-00C9Wc-V5 for pgsql-hackers@arkaria.postgresql.org; Mon, 29 Apr 2024 12:08:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1s1Po3-00GfPD-6F for pgsql-hackers@arkaria.postgresql.org; Mon, 29 Apr 2024 12:08:28 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s1Po2-00GfP5-9W for pgsql-hackers@lists.postgresql.org; Mon, 29 Apr 2024 12:08:27 +0000 Received: from wfhigh6-smtp.messagingengine.com ([64.147.123.157]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1s1Pny-000fXK-0f for pgsql-hackers@lists.postgresql.org; Mon, 29 Apr 2024 12:08:26 +0000 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailfhigh.west.internal (Postfix) with ESMTP id BD76A1800179; Mon, 29 Apr 2024 08:08:18 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute2.internal (MEProxy); Mon, 29 Apr 2024 08:08:19 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paquier.xyz; h= cc:cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm3; t=1714392498; x=1714478898; bh=UuyrjfUisO AcoOixZk9hhqmuFGXJ6OdhmcdlrXysVgQ=; b=Jzmu48MmNRzStAX7OVYSr54OBr lb5FZQZVjr442hQJ8UBCWcdX0vvYoCrxX0ifi1aMry/0JwQ6FUq63elwULAI8bdE PXx0z0igZGwCTtLefkIxb8T0mmo5RK+wuiDN8Ez2rQN7k0k72t33RfBzD9DB4Hb0 qdZ/aNZHMp55/0RYuui0i8aQXELRyMPtUJDj8UnyRM5e0K5gS5AepINbNJup4uHl M91U2MvL2mLwO7U8+BIRQucCrLCkkhqw0Avg99VNb7f4CGLdr4ED/EoXwxGec0MI /L6koroIV6k9/dsrYwTCgWYxavEFER1YxrWGHrYIJwEV7mmg9phgO54pGBGg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1714392498; x=1714478898; bh=UuyrjfUisOAcoOixZk9hhqmuFGXJ 6OdhmcdlrXysVgQ=; b=Zf117y98V+z/3ug0DleiqMmy+aiD9dB8NGtFYktgdo7H 1IZRKvnv/If15avr5WenioVKUla5YARNPmuQ7+m8l2H0R2OrpgDXmtfJ6c7F/+d5 jj6z+/LlHAJmafg/NwWtLdZa8ILP+pH2oK2NCWm5k00f79bxxb0L8vXJeWey8if3 S903DVNp3Ai6VY5gdfzLOYW15GiVnN0I6wHtGPhDf6s221ynHEBhjAuz7cgpfXx7 ZrhfbP02k2jKyxxxhw17Dy8sEUWrVwP+JvqhYv3moo659HBnXkKImyQsbyxwMA1D aQo8eMvfRjDFaGEOIWdRS9qybzdxSSeQi9FjVYvCTg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrvdduuddggeejucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne gfrhhlucfvnfffucdljedtmdenucfjughrpeffhffvvefukfhfgggtuggjsehgtderredt tddvnecuhfhrohhmpefoihgthhgrvghlucfrrghquhhivghruceomhhitghhrggvlhesph grqhhuihgvrhdrgiihiieqnecuggftrfgrthhtvghrnhepteelieefudffhffhtdetleeg geegfffhkeeuveetiefgudduvedutefggeeivdejnecuvehluhhsthgvrhfuihiivgeptd enucfrrghrrghmpehmrghilhhfrhhomhepmhhitghhrggvlhesphgrqhhuihgvrhdrgiih ii X-ME-Proxy: Feedback-ID: i0fe9450f:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 29 Apr 2024 08:08:15 -0400 (EDT) Date: Mon, 29 Apr 2024 21:07:58 +0900 From: Michael Paquier To: Heikki Linnakangas Cc: Jacob Champion , Postgres hackers Subject: Re: Direct SSL connection with ALPN and HBA rules Message-ID: References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="oU/E8vaFfofbLue7" Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --oU/E8vaFfofbLue7 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Apr 29, 2024 at 12:43:18PM +0300, Heikki Linnakangas wrote: > If a caller wants to distinguish between "libpq or the SSL library doesn't > support ALPN at all" from "the server didn't support ALPN", you can tell > from whether PQsslAttribute returns NULL or an empty string. So I think an > empty string is better. Thanks. I would also have used an empty string to differenciate these two cases. -- Michael --oU/E8vaFfofbLue7 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAmYvjZ4ACgkQnvQgOdby QH1v+Q//QrWhuCIujibDKB/k4DQ0GAQrofzpB3/XUECaX1oNlrBFAUjhFe6SGuL2 trxVzySuXExbHMOU1Wf2hOSuT4eGjPRp6BrtKY4wfdYSgrmTmpPLKfIpaHBXxVUP yGPnqcBqKiKc3VOiJxwSblvrsZ35ha6YeTcj0yEFXpHep/mYeFKJlReUx+DC3k5h ONzfdrArm0wfyG/iNPUn4AhYIdiCBOKq4EfDWmfjRwgzfpHD5calBHSJ5fu9v88i OSY0mvNEpnqXV8rdxsnj8+2vPWPK84JPUi0xvFuEHkvgbaDjrFxm0rbF8GnRWzKH ejFAnvlz5IOEArK9etyEnqEjAo5iVH1ZcXMCYbCs3ZtEmN88xYjul+/hU8Rgd5MR 9Bb3J8lpL0iCydqwq3ZH25CFq6XnhsgpHgZ9D2WskpLY6L008KhaEMITKe5jJpVt 50juLcZK/vkSpPENySIgO65dYrthJl50G9IWxv14SIIWwwC/TyCObqpGOTpHVHAP jXES8hJWJH1QGNUNpbH0cqDnet6oSQ+kSr5CGdYTJqtaGyl8bu2WfF7k1FGYEDPC UdgNf+set0+XvVmUZ9jr77mSGS4QqZo52XAudh9JczMsWetFUZI/TReoxzPB0vZR RvpMuxW0D6p2VKXxl9H8OFRgWdyZjYQ+Dzw4Xl6EnmQkubf3fYM= =ory9 -----END PGP SIGNATURE----- --oU/E8vaFfofbLue7--