Fix comment regarding LibreSSL availability

danielgustafsson · danielgustafsson · commit c34d7df6ad53 · 2024-05-05T09:47:35.000+02:00
SSL_AD_NO_APPLICATION_PROTOCOL is indeed available in LibreSSL, but only in 3.4.3 and later (shipped in OpenBSD 7.0). Discussion: https://postgr.es/m/E1s1g0Z-000jeC-OR@gemulon.postgresql.org
diff --git a/src/interfaces/libpq/fe-secure-openssl.c b/src/interfaces/libpq/fe-secure-openssl.c
@@ -1746,7 +1746,8 @@ SSLerrmessage(unsigned long ecode)
 	 * The ERR_reason_error_string() function doesn't give any error string
 	 * for that for some reason, so do it ourselves.  See
 	 * https://github.com/openssl/openssl/issues/24300.  This is available in
-	 * OpenSSL 1.1.0 and later, but as of this writing not in LibreSSL.
+	 * OpenSSL 1.1.0 and later, as well as in LibreSSL 3.4.3 (OpenBSD 7.0) and
+	 * later.
 	 */
 #ifdef SSL_AD_NO_APPLICATION_PROTOCOL
 	if (ERR_GET_LIB(ecode) == ERR_LIB_SSL &&
