Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert - Mailing list pgsql-hackers

From Jacob Champion
Subject Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert
Date
Msg-id CAAWbhmh_8pcFtBjiZEfbTjd0Edm+PV7PPJ72+ytaWCDPQKb4kA@mail.gmail.com
Whole thread Raw
In response to Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert  (Jacob Champion <jchampion@timescale.com>)
Responses Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert
List pgsql-hackers
On Tue, Nov 1, 2022 at 10:03 AM Jacob Champion <jchampion@timescale.com> wrote:
> I'm not familiar with "unregistered scheme" in this context and will
> need to dig in.

Unfortunately I can't reproduce with 3.0.0 on Ubuntu :(

I'm suspicious that it may be related to [1], in which case the
problem might be fixed by upgrading to the latest OpenSSL. But that's
just a guess.

--Jacob

[1] https://github.com/openssl/openssl/issues/18691



pgsql-hackers by date:

Previous
From: Andres Freund
Date:
Subject: Re: heavily contended lwlocks with long wait queues scale badly
Next
From: Corey Huinker
Date:
Subject: Re: pg_dump: Refactor code that constructs ALTER ... OWNER TO commands