Horton

Re: Channel binding for post-quantum cryptography

Jacob Champion <jacob.champion@enterprisedb.com>

View thread
From: Jacob Champion <jacob.champion@enterprisedb.com>
To: Filip Janus <fjanus@redhat.com>
Cc: Michael Paquier <michael@paquier.xyz>, Pgsql Hackers <pgsql-hackers@postgresql.org>, Heikki Linnakangas <hlinnaka@iki.fi>, Daniel Gustafsson <daniel@yesql.se>
Date: 2025-10-31T20:57:36Z
Lists: pgsql-hackers

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

  1. Fix handling of SCRAM-SHA-256's channel binding with RSA-PSS certificates

On Fri, Oct 31, 2025 at 2:26 AM Filip Janus <fjanus@redhat.com> wrote:
> While fixing the actual issue will take some time, I’ve fixed the requested test.
> Since I’m still quite new to the PG community, would it make sense to propose a patch that only adds the test?

You mean like in a TODO: block in the test? Maybe, but in my opinion
the damage to configure alone is not worth the benefit for this case,
until the test is passing. (And if OpenSSL were to change to provide a
digest through its API, as briefly mentioned in the IETF discussion,
the new test might not actually test any new code.)

--Jacob