TLS certificate alternate trust paths issue in libpq - certificate chain validation failing

2024-04-30 Thread Thomas Spear
Hello, I've recently joined the list on a tip from one of the maintainers of jdbc-postgres as I wanted to discuss an issue we've run into and find out if the fix we've worked out is the right thing to do, or if there is actually a bug that needs to be fixed. The full details can be found at github

Re: TLS certificate alternate trust paths issue in libpq - certificate chain validation failing

2024-05-01 Thread Thomas Spear
On Tue, Apr 30, 2024 at 5:19 PM Jacob Champion < jacob.champ...@enterprisedb.com> wrote: On Tue, Apr 30, 2024 at 2:41 PM Thomas Spear wrote: > The full details can be found at github.com/pgjdbc/pgjdbc/discussions/3236 - in summary, both jdbc-postgres and the psql cli seem to be affec

Re: TLS certificate alternate trust paths issue in libpq - certificate chain validation failing

2024-05-01 Thread Thomas Spear
On Wed, May 1, 2024 at 9:23 AM Jacob Champion < jacob.champ...@enterprisedb.com> wrote: > On Wed, May 1, 2024 at 6:48 AM Thomas Spear wrote: > > I dumped out the certificates presented by the server using openssl, and > the chain that gets output includes "Microsoft Azur

Re: TLS certificate alternate trust paths issue in libpq - certificate chain validation failing

2024-05-01 Thread Thomas Spear
On Wed, May 1, 2024 at 12:31 PM Jacob Champion < jacob.champ...@enterprisedb.com> wrote: > On Wed, May 1, 2024 at 8:17 AM Thomas Spear wrote: > > Circling back to my original question, why is there a difference in > behavior? > > > > What I believe should be ha