Fix fallback behavior when server sends an ERROR early at startup
Heikki Linnakangas <heikki.linnakangas@iki.fi>
Fix fallback behavior when server sends an ERROR early at startup
With sslmode=prefer, the desired behavior is to completely fail the
connection attempt, *not* fall back to a plaintext connection, if the
server responds to the SSLRequest with an error ('E') response instead
of rejecting SSL with an 'N' response. This was broken in commit
05fd30c0e7.
Reported-by: Jacob Champion
Reviewed-by: Michael Paquier
Discussion: https://www.postgresql.org/message-id/CAOYmi%2Bnwvu21mJ4DYKUa98HdfM_KZJi7B1MhyXtnsyOO-PB6Ww%40mail.gmail.com
Backpatch-through: 17
Files
| Path | Change | +/− |
|---|---|---|
| src/interfaces/libpq/fe-connect.c | modified | +17 −0 |
Discussion
- Direct SSL connection and ALPN loose ends 18 messages · 2024-04-29 → 2024-07-26