]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Fix fallback behavior when server sends an ERROR early at startup
authorHeikki Linnakangas <heikki.linnakangas@iki.fi>
Fri, 26 Jul 2024 11:52:08 +0000 (14:52 +0300)
committerHeikki Linnakangas <heikki.linnakangas@iki.fi>
Fri, 26 Jul 2024 12:02:29 +0000 (15:02 +0300)
commitf06a632a77ed27aab087d62bd76bc52be3a2ac6f
tree674f4416f723b19f99ddd85b145eee701064d063
parent3df7f44a8c7c456c0a0d4d02a1167e972dc24eaa
Fix fallback behavior when server sends an ERROR early at startup

With sslmode=prefer, the desired behavior is to completely fail the
connection attempt, *not* fall back to a plaintext connection, if the
server responds to the SSLRequest with an error ('E') response instead
of rejecting SSL with an 'N' response. This was broken in commit
05fd30c0e7.

Reported-by: Jacob Champion
Reviewed-by: Michael Paquier
Discussion: https://www.postgresql.org/message-id/CAOYmi%2Bnwvu21mJ4DYKUa98HdfM_KZJi7B1MhyXtnsyOO-PB6Ww%40mail.gmail.com
Backpatch-through: 17
src/interfaces/libpq/fe-connect.c