Re: BUG #17522: While using --with-ssl=openssl and PG_TEST_EXTRA='ssl' options, SSL test fails on OpenBSD 7.1

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Jacob Champion <jchampion(at)timescale(dot)com>
Cc: Kyotaro Horiguchi <horikyota(dot)ntt(at)gmail(dot)com>, peter(dot)eisentraut(at)enterprisedb(dot)com, Michael Paquier <michael(at)paquier(dot)xyz>, byavuz81(at)gmail(dot)com, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #17522: While using --with-ssl=openssl and PG_TEST_EXTRA='ssl' options, SSL test fails on OpenBSD 7.1
Date: 2022-06-21 21:15:53
Message-ID: 3091666.1655846153@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Jacob Champion <jchampion(at)timescale(dot)com> writes:
> On Tue, Jun 21, 2022 at 3:07 PM Jacob Champion <jchampion(at)timescale(dot)com> wrote:
>> There is also a question of why LibreSSL doesn't do the same for the
>> IPv6 CIDR test. Should we proactively disable SNI for both of them?

> (Never mind; it's because we don't send SNI if there's a colon
> anywhere in the host string.)

So maybe the simplest fix is to do the same if there's a '/' anywhere?
More generally, should we limit the SNI host string to chars allowed in
DNS names?

regards, tom lane

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message PG Bug reporting form 2022-06-21 23:11:53 BUG #17525: Range partition by date won't allow the use of a date that is the upper bound
Previous Message Jacob Champion 2022-06-21 20:15:05 Re: BUG #17522: While using --with-ssl=openssl and PG_TEST_EXTRA='ssl' options, SSL test fails on OpenBSD 7.1