Re: Serverside SNI support in libpq

Daniel Gustafsson <daniel@yesql.se>

From: Daniel Gustafsson <daniel@yesql.se>

To: Jacob Champion <jacob.champion@enterprisedb.com>

Cc: Jelte Fennema-Nio <postgres@jeltef.nl>, Heikki Linnakangas <hlinnaka@iki.fi>, Dewei Dai <daidewei1970@163.com>, "li.evan.chao" <li.evan.chao@gmail.com>, Michael Paquier <michael@paquier.xyz>, Andres Freund <andres@anarazel.de>, Pgsql Hackers <pgsql-hackers@lists.postgresql.org>

Date: 2026-03-12T14:36:00Z

Lists: pgsql-hackers

Attachments

v17-0002-ssl-Serverside-SNI-support-for-libpq.patch (application/octet-stream) patch v17-0002
v17-0001-ssl-Add-tests-for-client-CA.patch (application/octet-stream) patch v17-0001

> On 10 Mar 2026, at 14:11, Daniel Gustafsson <daniel@yesql.se> wrote:
> 
> The attached rebase adds a check, and testcase, for duplicated hostname entries
> in pg_hosts.conf and errors out in case a host is configured multiple times.

And another small update to SKIP the newly added tests on LibreSSL since they
use sslmode require which is only available in OpenSSL.  No other changes to
the patchset in this version (apart from a freshly brewed rebase of course).

--
Daniel Gustafsson

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Declare load_hosts() as returning HostsFileLoadResult.
- 93da29736649 19 (unreleased) landed
ssl: Skip passphrase reload tests in EXEC_BACKEND builds
- e87ab5049deb 19 (unreleased) landed
ssl: Serverside SNI support for libpq
- 4f433025f666 19 (unreleased) landed
ssl: Add tests for client CA
- 25e568ba7ce7 19 (unreleased) landed