postgres

mirror of https://github.com/postgres/postgres.git synced 2025-12-07 12:02:30 +03:00

Files

Magnus Hagander 9029f4b374 Add system view pg_stat_ssl

This view shows information about all connections, such as if the
connection is using SSL, which cipher is used, and which client
certificate (if any) is used.

Reviews by Alex Shulgin, Heikki Linnakangas, Andres Freund & Michael Paquier

2015-04-12 19:07:46 +02:00

auth.c

Use FLEXIBLE_ARRAY_MEMBER in a number of other places.

2015-02-21 16:12:14 -05:00

be-fsstubs.c

Update copyright for 2015

2015-01-06 11:43:47 -05:00

be-secure-openssl.c

Add system view pg_stat_ssl

2015-04-12 19:07:46 +02:00

be-secure.c

Simplify waiting logic in reading from / writing to client.

2015-02-13 21:46:14 +02:00

crypt.c

Don't allow immediate interrupts during authentication anymore.

2015-02-03 22:54:48 +01:00

hba.c

Remove code to match IPv4 pg_hba.conf entries to IPv4-in-IPv6 addresses.

2015-02-17 12:49:18 -05:00

ip.c

Remove code to match IPv4 pg_hba.conf entries to IPv4-in-IPv6 addresses.

2015-02-17 12:49:18 -05:00

Makefile

Support frontend-backend protocol communication using a shm_mq.

2014-10-31 12:02:40 -04:00

md5.c

Update copyright for 2015

2015-01-06 11:43:47 -05:00

pg_hba.conf.sample

Remove support for native krb5 authentication

2014-01-19 17:05:01 +01:00

pg_ident.conf.sample

Reformat the comments in pg_hba.conf and pg_ident.conf

2010-01-26 06:58:39 +00:00

pqcomm.c

Simplify waiting logic in reading from / writing to client.

2015-02-13 21:46:14 +02:00

pqformat.c

2015-01-06 11:43:47 -05:00

pqmq.c

2015-01-06 11:43:47 -05:00

pqsignal.c

2015-01-06 11:43:47 -05:00

README.SSL

Remove useless whitespace at end of lines

2010-11-23 22:34:55 +02:00

README.SSL

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------