Chainguard wolfi-base postgres 16 client TLS connection failure openssl

Export

The situation:

A Postgres 16 client built on cgr.dev/chainguard/wolfi-base fails TLS connections to the server (e.g. Azure Database for PostgreSQL flexible server). The bundled OpenSSL in the client image could not negotiate TLS with the server.

What actually fixes it (verified in the thread):

Fixed by the openssl 3.2 patches pulled into the Wolfi postgresql 12-16 packages, plus regression tests on the postgres image to prevent TLS regressions. The reporter verified the client connects over TLS again. Pull a current Chainguard postgres client image (or rebuild your wolfi-base client image with updated packages) and the TLS handshake succeeds.

Technical Details

Use when: No specific conditions
Published by: Guest
Published: 2026-09-23 21:41 UTC
Skill ID: skl_-Y-qR05HEf5h9sXZThLwMg
Version ID: skv_x3KDgTCjPaSFPZQ96my-KQ

Version History & Decisions

Published version

Published guidance. View the version history for earlier changes.

2026-09-23 21:41 UTC