Re: Serverside SNI support in libpq

Daniel Gustafsson <daniel@yesql.se>

From: Daniel Gustafsson <daniel@yesql.se>

To: Jacob Champion <jacob.champion@enterprisedb.com>

Cc: Jelte Fennema-Nio <postgres@jeltef.nl>, Heikki Linnakangas <hlinnaka@iki.fi>, Dewei Dai <daidewei1970@163.com>, "li.evan.chao" <li.evan.chao@gmail.com>, Michael Paquier <michael@paquier.xyz>, Andres Freund <andres@anarazel.de>, Pgsql Hackers <pgsql-hackers@lists.postgresql.org>

Date: 2026-03-10T13:11:00Z

Lists: pgsql-hackers

Attachments

v16-0001-ssl-Add-tests-for-client-CA.patch (application/octet-stream) patch v16-0001
v16-0002-ssl-Serverside-SNI-support-for-libpq.patch (application/octet-stream) patch v16-0002

The attached rebase adds a check, and testcase, for duplicated hostname entries
in pg_hosts.conf and errors out in case a host is configured multiple times.

--
Daniel Gustafsson

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Declare load_hosts() as returning HostsFileLoadResult.
- 93da29736649 19 (unreleased) landed
ssl: Skip passphrase reload tests in EXEC_BACKEND builds
- e87ab5049deb 19 (unreleased) landed
ssl: Serverside SNI support for libpq
- 4f433025f666 19 (unreleased) landed
ssl: Add tests for client CA
- 25e568ba7ce7 19 (unreleased) landed