From c34d7df6ad5394c790941a8a4f1a1c71573b47f9 Mon Sep 17 00:00:00 2001 From: Daniel Gustafsson Date: Sun, 5 May 2024 09:47:35 +0200 Subject: [PATCH] Fix comment regarding LibreSSL availability SSL_AD_NO_APPLICATION_PROTOCOL is indeed available in LibreSSL, but only in 3.4.3 and later (shipped in OpenBSD 7.0). Discussion: https://postgr.es/m/E1s1g0Z-000jeC-OR@gemulon.postgresql.org --- src/interfaces/libpq/fe-secure-openssl.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/interfaces/libpq/fe-secure-openssl.c b/src/interfaces/libpq/fe-secure-openssl.c index 4f8ec3221e..fb6bb911f5 100644 --- a/src/interfaces/libpq/fe-secure-openssl.c +++ b/src/interfaces/libpq/fe-secure-openssl.c @@ -1746,7 +1746,8 @@ SSLerrmessage(unsigned long ecode) * The ERR_reason_error_string() function doesn't give any error string * for that for some reason, so do it ourselves. See * https://github.com/openssl/openssl/issues/24300. This is available in - * OpenSSL 1.1.0 and later, but as of this writing not in LibreSSL. + * OpenSSL 1.1.0 and later, as well as in LibreSSL 3.4.3 (OpenBSD 7.0) and + * later. */ #ifdef SSL_AD_NO_APPLICATION_PROTOCOL if (ERR_GET_LIB(ecode) == ERR_LIB_SSL &&