Re: [HACKERS] Introducing SNI in TLS handshake for SSL connections

2017-05-19 Thread Peter Eisentraut
On 4/24/17 22:26, Florin Asavoaie wrote: > If there's nobody against this, I can try to do the patch myself, > doesn't look too difficult (I expect it to simply work by > calling SSL_set_tlsext_host_name(SSL_context, PQhost(conn))) somewhere > in initialize_SSL in fe-secure-openssl.c. I had to loo

[HACKERS] Introducing SNI in TLS handshake for SSL connections

2017-04-25 Thread Florin Asavoaie
Hi, Back in November 2013 someone suggested adding the SNI header in the TLS handshake for connections initiated by libpq using OpenSQL. There was no usecase at that point. However, right now there is one: I'd like to write a small "PostGreSQL router" that routes connections to a specific cluste