Re: BUG #4340: SECURITY: Is SSL Doing Anything?

From: Alvaro Herrera <alvherre(at)commandprompt(dot)com>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Dan Kaminsky <dan(at)doxpara(dot)com>, pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #4340: SECURITY: Is SSL Doing Anything?
Date: 2008-08-18 21:56:51
Message-ID: 20080818215651.GD4454@alvh.no-ip.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Bruce Momjian wrote:
> Tom Lane wrote:
> > Dan Kaminsky <dan(at)doxpara(dot)com> writes:

> > > Second, are you saying verify_peer doesn't do anything for
> > > authentication? Are you sure about that? There's really little reason
> > > otherwise for the call to exist.
> >
> > Er, we don't *have* a verify_peer callback.
>
> Uh, the user reported running Postgres 7.3 and we have improved SSL
> quite a bit since then so perhaps an upgrade and reading the current
> docs would help the user.

The code is identical in HEAD, according to a quick read I did last
week.

--
Alvaro Herrera http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Dan Boeriu 2008-08-18 22:48:21 BUG #4363: ts_query bug
Previous Message Tom Lane 2008-08-17 15:07:40 Re: BUG #4362: Casts from base types to composite types don't work.