postgres

mirror of https://github.com/postgres/postgres.git synced 2025-09-02 04:21:28 +03:00

Files

Tom Lane 4c051c41d6 Fix unportable disregard of alignment requirements in RADIUS code.

The compiler is entitled to store a char[] local variable with no
particular alignment requirement.  Our RADIUS code cavalierly took such
a local variable and cast its address to a struct type that does have
alignment requirements.  On an alignment-picky machine this would lead
to bus errors.  To fix, declare the local variable honestly, and then
cast its address to char * for use in the I/O calls.

Given the lack of field complaints, there must be very few if any
people affected; but nonetheless this is a clear portability issue,
so back-patch to all supported branches.

Noted while looking at a Coverity complaint in the same code.

2017-03-26 17:35:35 -04:00

auth-scram.c

Allow SCRAM authentication, when pg_hba.conf says 'md5'.

2017-03-24 13:32:21 +02:00

auth.c

Fix unportable disregard of alignment requirements in RADIUS code.

2017-03-26 17:35:35 -04:00

be-fsstubs.c

Use wrappers of PG_DETOAST_DATUM_PACKED() more.

2017-03-12 19:35:34 -04:00

be-secure-openssl.c

Re-allow SSL passphrase prompt at server start, but not thereafter.

2017-01-04 12:44:03 -05:00

be-secure.c

Re-allow SSL passphrase prompt at server start, but not thereafter.

2017-01-04 12:44:03 -05:00

crypt.c

Allow SCRAM authentication, when pg_hba.conf says 'md5'.

2017-03-24 13:32:21 +02:00

hba.c

Allow SCRAM authentication, when pg_hba.conf says 'md5'.

2017-03-24 13:32:21 +02:00

ifaddr.c

Remove some configure header-file checks that we weren't really using.

2017-02-25 18:10:09 -05:00

Makefile

Support SCRAM-SHA-256 authentication (RFC 5802 and 7677).

2017-03-07 14:25:40 +02:00

pg_hba.conf.sample

Enable replication connections by default in pg_hba.conf

2017-03-09 08:39:44 -05:00

pg_ident.conf.sample

Reformat the comments in pg_hba.conf and pg_ident.conf

2010-01-26 06:58:39 +00:00

pqcomm.c

Include port number when logging successful binding to a TCP port.

2017-03-14 13:18:38 -04:00

pqformat.c

2017-01-03 13:48:53 -05:00

pqmq.c

2017-01-03 13:48:53 -05:00

pqsignal.c

2017-01-03 13:48:53 -05:00

README.SSL

Remove useless whitespace at end of lines

2010-11-23 22:34:55 +02:00

README.SSL

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------