Re: SSL SNI

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: SSL SNI
Дата
Msg-id 14840.1622742761@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: SSL SNI  (Tom Lane <tgl@sss.pgh.pa.us>)
Ответы Re: SSL SNI  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
I wrote:
> Jacob Champion <pchampion@vmware.com> writes:
>> It looks like this code needs some guards for a NULL conn->pghost. For example when running
>> psql 'dbname=postgres sslmode=require hostaddr=127.0.0.1'
>> with no PGHOST in the environment, psql is currently segfaulting for
>> me.

> Duplicated here:

It looks like the immediate problem can be resolved by just adding
a check for conn->pghost not being NULL, since the comment above
says

     * Per RFC 6066, do not set it if the host is a literal IP address (IPv4
     * or IPv6).

and having only hostaddr certainly fits that case.  But I didn't
check to see if any more problems arise later.

            regards, tom lane



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Daniel Gustafsson
Дата:
Сообщение: Re: Support for NSS as a libpq TLS backend
Следующее
От: Jeff Davis
Дата:
Сообщение: Re: BUG #16079: Question Regarding the BUG #16064