postgres

mirror of https://github.com/postgres/postgres.git synced 2025-11-25 12:03:53 +03:00

Files

Peter Eisentraut 25d532698d Move SCRAM-related name definitions to scram-common.h

Mechanism names for SCRAM and channel binding names have been included
in scram.h by the libpq frontend code, and this header references a set
of routines which are only used by the backend.  scram-common.h is on
the contrary usable by both the backend and libpq, so getting those
names from there seems more reasonable.

Author: Michael Paquier <michael.paquier@gmail.com>

2017-12-18 16:59:48 -05:00

auth-scram.c

Check channel binding flag at end of SCRAM exchange

2017-12-01 09:53:26 -05:00

auth.c

Move SCRAM-related name definitions to scram-common.h

2017-12-18 16:59:48 -05:00

be-fsstubs.c

Refactor permissions checks for large objects.

2017-11-09 12:56:07 -05:00

be-secure-openssl.c

Support channel binding 'tls-unique' in SCRAM

2017-11-18 10:15:54 -05:00

be-secure.c

Always use 2048 bit DH parameters for OpenSSL ephemeral DH ciphers.

2017-07-31 22:36:09 +03:00

crypt.c

Don't allow logging in with empty password.

2017-08-07 17:03:42 +03:00

hba.c

Fix some null pointer dereferences in LDAP auth code

2017-11-10 14:21:32 -05:00

ifaddr.c

Replace most usages of ntoh[ls] and hton[sl] with pg_bswap.h.

2017-10-01 15:36:14 -07:00

Makefile

Support SCRAM-SHA-256 authentication (RFC 5802 and 7677).

2017-03-07 14:25:40 +02:00

pg_hba.conf.sample

Rename "scram" to "scram-sha-256" in pg_hba.conf and password_encryption.

2017-04-18 14:50:50 +03:00

pg_ident.conf.sample

…

pqcomm.c

Change TRUE/FALSE to true/false

2017-11-08 11:37:28 -05:00

pqformat.c

Add more efficient functions to pqformat API.

2017-10-11 16:01:52 -07:00

pqmq.c

Clean up shm_mq cleanup.

2017-08-31 15:10:24 -04:00

pqsignal.c

2017-01-03 13:48:53 -05:00

README.SSL

…

README.SSL

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------