You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Heikki Linnakangas 17a834a04d Reject SSL connection if ALPN is used but there's no common protocol ... If the client supports ALPN but tries to use some other protocol, like HTTPS, reject the connection in the server. That is surely a confusion of some sort. Furthermore, the ALPN RFC 7301 says: > In the event that the server supports no protocols that the client > advertises, then the server SHALL respond with a fatal > "no_application_protocol" alert. This commit makes the server follow that advice. In the client, specifically check for the OpenSSL error code for the "no_application_protocol" alert. Otherwise you got a cryptic "SSL error: SSL error code 167773280" error if you tried to connect to a non-PostgreSQL server that rejects the connection with "no_application_protocol". ERR_reason_error_string() returns NULL for that code, which frankly seems like an OpenSSL bug to me, but we can easily print a better message ourselves. Reported-by: Jacob Champion Discussion: https://www.postgresql.org/message-id/6aedcaa5-60f3-49af-a857-2c76ba55a1f3@iki.fi		2 years ago
..
backend	Reject SSL connection if ALPN is used but there's no common protocol	2 years ago
bin	libpq: If ALPN is not used, make PQsslAttribute(conn, "alpn") == ""	2 years ago
common	Remove redundant JSON parser typedefs	2 years ago
fe_utils	Allow dbname to be written as part of connstring via pg_basebackup's -R option.	2 years ago
include	Revert "Add GUC backtrace_on_internal_error"	2 years ago
interfaces	Reject SSL connection if ALPN is used but there's no common protocol	2 years ago
makefiles	Optimize pg_popcount() with AVX-512 instructions.	2 years ago
pl	Fix plpgsql's handling of -- comments following expressions.	2 years ago
port	Fix code for probing availability of AVX-512.	2 years ago
template	…
test	Make two-phase tests of ECPG and main suite more concurrent-proof	2 years ago
timezone	…
tools	Remove redundant JSON parser typedefs	2 years ago
tutorial	…
.gitignore	…
DEVELOPERS	…
Makefile	…
Makefile.global.in	Update Unicode data to CLDR 45	2 years ago
Makefile.shlib	…
meson.build	…
nls-global.mk	…