Re: [HACKERS] Introducing SNI in TLS handshake for SSL connections - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: [HACKERS] Introducing SNI in TLS handshake for SSL connections
Date
Msg-id 9af47a45-f92d-7ede-2d71-222ba24447eb@2ndquadrant.com
Whole thread Raw
In response to [HACKERS] Introducing SNI in TLS handshake for SSL connections  (Florin Asavoaie <florin.asavoaie@gmail.com>)
List pgsql-hackers
On 4/24/17 22:26, Florin Asavoaie wrote:
> If there's nobody against this, I can try to do the patch myself,
> doesn't look too difficult (I expect it to simply work by
> calling SSL_set_tlsext_host_name(SSL_context, PQhost(conn))) somewhere
> in initialize_SSL in fe-secure-openssl.c.

I had to look up what SNI is:
https://en.wikipedia.org/wiki/Server_Name_Indication

This seems useful.

If you have a patch, please add it here:
https://commitfest.postgresql.org/14/

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services



pgsql-hackers by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: [HACKERS] TAP tests - installcheck vs check
Next
From: Thomas Munro
Date:
Subject: Re: [HACKERS] transition table behavior with inheritance appearsbroken (was: Declarative partitioning - another take)