Re: Serverside SNI support in libpq - Mailing list pgsql-hackers

From Jacob Champion
Subject Re: Serverside SNI support in libpq
Date
Msg-id CAOYmi+=D6xkfOZVAGkkvskHs3_VXwupRhzb8hXkS=cPrXcDbKg@mail.gmail.com
Whole thread Raw
In response to Re: Serverside SNI support in libpq  (Jacob Champion <jacob.champion@enterprisedb.com>)
List pgsql-hackers
On Thu, Dec 18, 2025 at 9:06 AM Jacob Champion
<jacob.champion@enterprisedb.com> wrote:
> A nice-to-have v2ish feature might be to warn if the host configured
> for a certificate cannot in fact match that certificate according to
> OpenSSL.

Another wishlist item: the logs (both server- and client-side) are
pretty inscrutable when things fail right now. Server's relatively
easy to change, but I wonder if we can do something along the lines of
0b5d1fb36 to provide an extra hint on the client side?

--Jacob



pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: [PATCH] Make ReScanForeignScan callback optional for FDWs
Next
From: Bertrand Drouvot
Date:
Subject: Re: Report bytes and transactions actually sent downtream