postgres

mirror of https://github.com/postgres/postgres.git synced 2025-08-28 18:48:04 +03:00

Files

Heikki Linnakangas 07044efe00 Remove bogus SCRAM_ITERATION_LEN constant.

It was not used for what the comment claimed, at all. It was actually used
as the 'base' argument to strtol(), when reading the iteration count. We
don't need a constant for base-10, so remove it.

2017-04-06 17:41:48 +03:00

auth-scram.c

Remove bogus SCRAM_ITERATION_LEN constant.

2017-04-06 17:41:48 +03:00

auth.c

Fix unportable disregard of alignment requirements in RADIUS code.

2017-03-26 17:35:35 -04:00

be-fsstubs.c

Use wrappers of PG_DETOAST_DATUM_PACKED() more.

2017-03-12 19:35:34 -04:00

be-secure-openssl.c

Re-allow SSL passphrase prompt at server start, but not thereafter.

2017-01-04 12:44:03 -05:00

be-secure.c

Re-allow SSL passphrase prompt at server start, but not thereafter.

2017-01-04 12:44:03 -05:00

crypt.c

Allow SCRAM authentication, when pg_hba.conf says 'md5'.

2017-03-24 13:32:21 +02:00

hba.c

Allow SCRAM authentication, when pg_hba.conf says 'md5'.

2017-03-24 13:32:21 +02:00

ifaddr.c

Remove some configure header-file checks that we weren't really using.

2017-02-25 18:10:09 -05:00

Makefile

Support SCRAM-SHA-256 authentication (RFC 5802 and 7677).

2017-03-07 14:25:40 +02:00

pg_hba.conf.sample

Enable replication connections by default in pg_hba.conf

2017-03-09 08:39:44 -05:00

pg_ident.conf.sample

Reformat the comments in pg_hba.conf and pg_ident.conf

2010-01-26 06:58:39 +00:00

pqcomm.c

Include port number when logging successful binding to a TCP port.

2017-03-14 13:18:38 -04:00

pqformat.c

2017-01-03 13:48:53 -05:00

pqmq.c

2017-01-03 13:48:53 -05:00

pqsignal.c

2017-01-03 13:48:53 -05:00

README.SSL

Remove useless whitespace at end of lines

2010-11-23 22:34:55 +02:00

README.SSL

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------