Backport SSL_CTX_set1_groups_list() from upstream PG18 (commit 3d1ef3a15c3) to replace the legacy OBJ_sn2nid()/EC_KEY_new_by_curve_name() API in initialize_ecdh(). This enables ssl_ecdh_curve to accept colon-separated lists of TLS group names, including post-quantum hybrid groups such as X25519MLKEM768. Changes: - Replace legacy ECDH API with SSL_CTX_set1_groups_list() - Backport SSLerrmessageExt() helper for proper error messages - Add errhint for invalid group name diagnostics - Update GUC description to document colon-separated list support - Update postgresql.conf.sample with explanatory comment Resolves: RHEL-119229 Co-authored-by: Cursor <cursoragent@cursor.com> |
||
|---|---|---|
| .fmf | ||
| .gitignore | ||
| ci.fmf | ||
| gating.yaml | ||
| generate-pdf.sh | ||
| generate-sources.sh | ||
| hstore-plperl-data-dumper.patch | ||
| Makefile.regress | ||
| plans.fmf | ||
| plperl_warning.patch | ||
| postgresql16.spec | ||
| postgresql-12.5-contrib-dblink-expected-out.patch | ||
| postgresql-bashprofile | ||
| postgresql-datalayout-mismatch-on-s390.patch | ||
| postgresql-external-libpq.patch | ||
| postgresql-logging.patch | ||
| postgresql-man.patch | ||
| postgresql-no-libecpg.patch | ||
| postgresql-pqc-ssl-groups-v2.patch | ||
| postgresql-server-pg_config.patch | ||
| postgresql-var-run-socket.patch | ||
| postgresql.pam | ||
| postgresql.tmpfiles.d | ||
| README.md | ||
| rpm-pgsql.patch | ||
| rpminspect.yaml | ||
| sources | ||
postgresql16
The postgresql16 package