database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-08-18 12:22:09 +03:00
Code Activity
Files
f79531ffd42f2d0e5c35d1dffbc2c2f2cd2086dc
postgres/src/backend/libpq
History
Tom Lane fb50c38e9c Support OpenSSL 1.1.0 in 9.3 and 9.2. 
This commit back-patches the equivalent of the 9.5-branch commits
e2838c580 and 48e5ba61e, so that we can work with OpenSSL 1.1.0
in all supported branches.

Original patches by Andreas Karlsson and Heikki Linnakangas,
back-patching work by Andreas Karlsson.

Patch: https://postgr.es/m/0c817abb-3f7d-20fb-583a-58f7593a0bea@proxel.se
Discussion: https://postgr.es/m/5129.1492293840@sss.pgh.pa.us
2017-04-17 13:52:42 -04:00
..
auth.c
Fix unportable disregard of alignment requirements in RADIUS code.
2017-03-26 17:35:35 -04:00
be-fsstubs.c
Clean up compiler warnings from unused variables with asserts disabled
2012-03-21 23:33:10 +02:00
be-secure.c
Support OpenSSL 1.1.0 in 9.3 and 9.2.
2017-04-17 13:52:42 -04:00
crypt.c
Remove useless cast
2012-02-26 15:31:16 +02:00
hba.c
Remove code to match IPv4 pg_hba.conf entries to IPv4-in-IPv6 addresses.
2015-02-17 12:49:44 -05:00
ip.c
Remove code to match IPv4 pg_hba.conf entries to IPv4-in-IPv6 addresses.
2015-02-17 12:49:44 -05:00
Makefile
Remove cvs keywords from all files.
2010-09-20 22:08:53 +02:00
md5.c
Remove tabs after spaces in C comments
2014-05-06 11:26:27 -04:00
pg_hba.conf.sample
initdb: Add options --auth-local and --auth-host
2012-02-01 21:18:55 +02:00
pg_ident.conf.sample
Reformat the comments in pg_hba.conf and pg_ident.conf
2010-01-26 06:58:39 +00:00
pqcomm.c
Prevent a double free by not reentering be_tls_close().
2015-05-18 10:02:37 -04:00
pqformat.c
Remove tabs after spaces in C comments
2014-05-06 11:26:27 -04:00
pqsignal.c
Remove tabs after spaces in C comments
2014-05-06 11:26:27 -04:00
README.SSL
Remove useless whitespace at end of lines
2010-11-23 22:34:55 +02:00

README.SSL 

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------