From 908eebe3d9e6e30b76c2e6ec2ebfd5cff672dac8 Mon Sep 17 00:00:00 2001
From: Eli Young <elyscape@gmail.com>
Date: Thu, 15 Jul 2021 13:04:33 -0700
Subject: [PATCH] Avoid nil deref when using Postgres StartTLS

Fixes #234
---
 starttls/starttls.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/starttls/starttls.go b/starttls/starttls.go
index fa49b51..4f722e6 100644
--- a/starttls/starttls.go
+++ b/starttls/starttls.go
@@ -247,6 +247,10 @@ func GetConnectionState(startTLSType, connectName, connectTo, identity, clientCe
 		return nil, nil, fmt.Errorf("error connecting: %v", result.err)
 	}
 
+	if cri == nil {
+		return result.state, nil, nil
+	}
+
 	if result.state.Version < tls.VersionTLS12 && *cri != nil {
 		// Sending supported signature schemes was added in TLS 1.2,
 		// but Go lies to us in the GetClientCertificate callback and