Re: Add ssl_(supported|shared)_groups to sslinfo - Mailing list pgsql-hackers

> On Sun, Sep 06, 2026 at 02:04:01AM -0700, Zsolt Parragi wrote:
> +        /*
> +         * SSL_group_to_name can return NULL in case of an error, e.g. when no
> +         * such name was registered for some reason.
> +         */
> +        group_name = SSL_group_to_name(ssl, nid);
> +        if (group_name == NULL)
> +            ereport(ERROR,
> +                    (errcode(ERRCODE_FEATURE_NOT_SUPPORTED),
> +                     errmsg("unknown OpenSSL group at position %d",
> +                            call_cntr)));
> 
> I'm not sure if erroring out is the proper approach here. Won't this
> mean that with a newer openssl version on the client side, the
> function will potentially simply error out instead of returning proper
> results?

In one of the previous messages we've decided to report null rows in SRF
for such scenarios, and filter them out in SQL. I'm about to post the
new version with accumulated changes.