Re: libpq ssl -> clear fallback looses error messages

Tom Lane wrote:
> Magnus Hagander <magnus(at)hagander(dot)net> writes:
>> I noticed while working on general fixes for the certificate handling
>> that if we have a connection being attempted with sslmode=prefer (which
>> happens to be our default), we will loose error messages.
>
> Yeah, this came up awhile ago. I don't see any easy solution that
> isn't just moving the bad cases around ... although maybe moving them
> away from the default/common cases could be a good thing anyway.

I think it would.

>> Basically, if we fail the SSL connection, we will throw away the error
>> message and try a cleartext connection.
>
> Maybe the answer is to not throw away the first error message? But
> presenting both messages could be confusing too.

Do we have the infrastructure to report more than one error? I thought
we didn't...

//Magnus