Horton
Menu

Re: Serverside SNI support in libpq

Michael Banck <mbanck@gmx.net>

View thread
From: Michael Banck <mbanck@gmx.net>
To: Daniel Gustafsson <daniel@yesql.se>
Cc: Zsolt Parragi <zsolt.parragi@percona.com>, Jacob Champion <jacob.champion@enterprisedb.com>, Jelte Fennema-Nio <postgres@jeltef.nl>, Heikki Linnakangas <hlinnaka@iki.fi>, Dewei Dai <daidewei1970@163.com>, "li.evan.chao" <li.evan.chao@gmail.com>, Michael Paquier <michael@paquier.xyz>, Andres Freund <andres@anarazel.de>, Pgsql Hackers <pgsql-hackers@lists.postgresql.org>
Date: 2026-03-19T09:39:25Z
Lists: pgsql-hackers 
Hi,

On Wed, Mar 18, 2026 at 01:19:01PM +0100, Daniel Gustafsson wrote:
> After staring at this version more, and testing on various platforms with
> various OpenSSL versions, I went ahead and pushed it.  Thanks for all the
> reviews!

I'm really late to the part, but I did not see it discussed elsewhere on
a quick glance: Isn't pg_hosts.conf a really (too) generic name for this
feature? I don't want to open a huge bikeshedding sub-thread, but was a
more specific filename considered?


Michael

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

  1. Declare load_hosts() as returning HostsFileLoadResult.

  2. ssl: Skip passphrase reload tests in EXEC_BACKEND builds

  3. ssl: Serverside SNI support for libpq

  4. ssl: Add tests for client CA