Re: PostgreSQL and OpenSSL 4.0.0

From: Cary Huang <cary(dot)huang(at)highgo(dot)ca>
To: "Daniel Gustafsson" <daniel(at)yesql(dot)se>
Cc: "Michael Paquier" <michael(at)paquier(dot)xyz>, "PostgreSQL-development" <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Re: PostgreSQL and OpenSSL 4.0.0
Date: 2026-05-07 19:32:51
Message-ID: 19e03edb6d1.7f49936f6069183.330334679160815231@highgo.ca
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi

I tried the patch and Postgres and sslinfo compiled with no warnings as
expected.

However, in OpenSSL 4.0, I noticed that it reports certificate revocation
errors differently from previous versions, causing the SSL tests to fail.
The test expects "ssl alert certificate revoked", but OpenSSL 4.0 returns
"tls alert certificate revoked" instead.

I made a patch to make the ssl tests compatible with OpenSSL 4.0 as well.

thanks!

Cary Huang
-------------
HighGo Software Inc. (Canada)
cary(dot)huang(at)highgo(dot)ca
www.highgo.ca

Attachment Content-Type Size
0001-fix-ssl-test-on-openssl-4.0.patch application/octet-stream 2.8 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Daniel Bauman 2026-05-07 19:39:06 Re: Doc update proposal for the note on log_statement in the runtime config for logging page
Previous Message Alexandre Felipe 2026-05-07 19:12:25 Re: SLOPE - Planner optimizations on monotonic expressions.