Re: Serverside SNI support in libpq

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
Cc: Zsolt Parragi <zsolt(dot)parragi(at)percona(dot)com>, Jelte Fennema-Nio <postgres(at)jeltef(dot)nl>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, Dewei Dai <daidewei1970(at)163(dot)com>, "li(dot)evan(dot)chao" <li(dot)evan(dot)chao(at)gmail(dot)com>, Michael Paquier <michael(at)paquier(dot)xyz>, Andres Freund <andres(at)anarazel(dot)de>, Pgsql Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Re: Serverside SNI support in libpq
Date: 2026-03-18 17:13:34
Message-ID: 6680D4A9-70EE-40AF-91C8-065EDA9EA456@yesql.se
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> On 18 Mar 2026, at 17:14, Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com> wrote:
>
> On Wed, Mar 18, 2026 at 7:25 AM Daniel Gustafsson <daniel(at)yesql(dot)se> wrote:
>> The longfin issue is a bit more odd, I can reproduce it on macOS with OpenSSL
>> 1.1.1 but nowhere else. Rather than reporting an SSL error for aborted
>> handshake it reports a SYSCALL error.
>
> Do you know yet why the handshake is aborted on macOS, as opposed to a
> polite handshake_failure alert?

As mentioned upthread it seems the error is likely the result of a bug in older
versions of OpenSSL, using the latest from the 1.1.1 series makes it go away.
I will go ahead with the EXEC_BACKEND fix in a bit to turn that animal green as
well.

> (I wouldn't mind a better error
> message than "SYSCALL error: EOF detected", but that's not something
> this patch did.)

+1

--
Daniel Gustafsson

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Andres Freund 2026-03-18 17:14:53 Re: eliminate xl_heap_visible to reduce WAL (and eventually set VM on-access)
Previous Message Fujii Masao 2026-03-18 17:10:30 Re: Use SIGTERM instead of SIGUSR1 for slotsync worker to exit during promotion?