| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | Jacob Champion <jchampion(at)timescale(dot)com> |
| Cc: | Kyotaro Horiguchi <horikyota(dot)ntt(at)gmail(dot)com>, peter(dot)eisentraut(at)enterprisedb(dot)com, Michael Paquier <michael(at)paquier(dot)xyz>, byavuz81(at)gmail(dot)com, pgsql-bugs(at)lists(dot)postgresql(dot)org |
| Subject: | Re: BUG #17522: While using --with-ssl=openssl and PG_TEST_EXTRA='ssl' options, SSL test fails on OpenBSD 7.1 |
| Date: | 2022-06-21 21:15:53 |
| Message-ID: | 3091666.1655846153@sss.pgh.pa.us |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-bugs |
Jacob Champion <jchampion(at)timescale(dot)com> writes:
> On Tue, Jun 21, 2022 at 3:07 PM Jacob Champion <jchampion(at)timescale(dot)com> wrote:
>> There is also a question of why LibreSSL doesn't do the same for the
>> IPv6 CIDR test. Should we proactively disable SNI for both of them?
> (Never mind; it's because we don't send SNI if there's a colon
> anywhere in the host string.)
So maybe the simplest fix is to do the same if there's a '/' anywhere?
More generally, should we limit the SNI host string to chars allowed in
DNS names?
regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | PG Bug reporting form | 2022-06-21 23:11:53 | BUG #17525: Range partition by date won't allow the use of a date that is the upper bound |
| Previous Message | Jacob Champion | 2022-06-21 20:15:05 | Re: BUG #17522: While using --with-ssl=openssl and PG_TEST_EXTRA='ssl' options, SSL test fails on OpenBSD 7.1 |