Re: BUG #19050: psql: could not find digest for NID UNDEF

Hi Tom,
Thank you for answering. I've tested psql connection with two hosts, both
yielded the same result (could not find digest for NID UNDEF). Both systems
have recent libpq and libssl. Also, "openssl s_client" shows server
certificate correctly on both hosts.

TEST CLIENT 1: Rocky Linux 9.6 (Blue Onyx) using default repositories
postgresql package provides psql
postgresql-private-libs package provides libpq.so
openssl-libs package provides libssl.so

# dnf list installed postgresql\* openssl-libs
Installed Packages
openssl-libs.x86_64 1:3.2.2-6.el9_5.1
@anaconda
postgresql.x86_64
16.10-1.module+el9.6.0+32421+7c015469 @appstream
postgresql-private-libs.x86_64
16.10-1.module+el9.6.0+32421+7c015469 @appstream

# psql --version
psql (PostgreSQL) 16.10

# file -L $(which psql)
/bin/psql: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV),
dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2,
BuildID[sha1]=51379c0b69cb45e885655e41f9f4587e20f679b5, for GNU/Linux
3.2.0, stripped

# ldd $(which psql) | grep -E "libpq|ssl"
libpq.so.private16-5 => /lib64/libpq.so.private16-5
(0x00007f69a0bc8000)
libssl.so.3 => /lib64/libssl.so.3 (0x00007f69a071a000)

TEST CLIENT 2: Rocky Linux 10.0 (Red Quartz) using repositories from
download.postgresql.org
postgresql17 package provides psql
postgresql17-libs package provides libpq.so
openssl-libs package provides libssl.so

# dnf list installed postgresql\* openssl-libs
Installed Packages
openssl-libs.x86_64
1:3.2.2-16.el10 @anaconda
postgresql17.x86_64
17.6-1PGDG.rhel10 @pgdg17
postgresql17-libs.x86_64
17.6-1PGDG.rhel10 @pgdg17

# psql --version
psql (PostgreSQL) 17.6

# file -L $(which psql)
/bin/psql: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically
linked, interpreter /lib64/ld-linux-x86-64.so.2,
BuildID[sha1]=794e81c0c1669164e24b22872e8224da031b087c, for GNU/Linux
3.2.0, stripped

# ldd /usr/pgsql-17/bin/psql | grep -E "libpq|ssl"
libpq.so.5 => /usr/pgsql-17/lib/libpq.so.5 (0x00007f30e8412000)
libssl.so.3 => /lib64/libssl.so.3 (0x00007f30e8050000)

On Thu, Sep 11, 2025 at 6:00 PM Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:

> PG Bug reporting form <noreply(at)postgresql(dot)org> writes:
> > When Ed25519 certificate is configured on PG server, I'm able to connect
> > with a Java client. Also, openssl and sslscan were able make connection
> and
> > show certificate details. Still CLI tool (psql) does not work with it and
> > refuses to connect.
>
> This does look similar to the previous discussion about RSA-PSS.
> But we fixed that a couple years ago. Are you sure your libpq
> is up-to-date? What about the openssl libraries it's bound to?
>
> > $ openssl version
> > OpenSSL 3.2.2 4 Jun 2024 (Library: OpenSSL 3.2.2 4 Jun 2024)
>
> This proves zero about what libpq is using. Applying "ldd"
> to psql might be more enlightening.
>
> regards, tom lane
>