From 1dd69f86a11b3d44ffc64a4e270b49e74e10ad38 Mon Sep 17 00:00:00 2001
From: Brandon Kauffman <bck01215@gmail.com>
Date: Fri, 23 Jun 2023 17:21:20 -0400
Subject: [PATCH]  Enable failover efforts when pg_hba.conf disallows non-ssl
 connections

Copy of https://github.com/jackc/pgconn/pull/133
---
 pgconn/pgconn.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pgconn/pgconn.go b/pgconn/pgconn.go
index 9f84605f..1fb65320 100644
--- a/pgconn/pgconn.go
+++ b/pgconn/pgconn.go
@@ -174,7 +174,7 @@ func ConnectConfig(octx context.Context, config *Config) (pgConn *PgConn, err er
 			const ERRCODE_INVALID_CATALOG_NAME = "3D000"                // db does not exist
 			const ERRCODE_INSUFFICIENT_PRIVILEGE = "42501"              // missing connect privilege
 			if pgerr.Code == ERRCODE_INVALID_PASSWORD ||
-				pgerr.Code == ERRCODE_INVALID_AUTHORIZATION_SPECIFICATION ||
+				pgerr.Code == ERRCODE_INVALID_AUTHORIZATION_SPECIFICATION && fc.TLSConfig != nil ||
 				pgerr.Code == ERRCODE_INVALID_CATALOG_NAME ||
 				pgerr.Code == ERRCODE_INSUFFICIENT_PRIVILEGE {
 				break