Re: Protocol problem with GSSAPI encryption?

Greetings,

* Andrew Gierth (andrew(at)tao11(dot)riddles(dot)org(dot)uk) wrote:
> >>>>> "Peter" == Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com> writes:
>
> >> It seems to me that this is a bug in ProcessStartupPacket, which
> >> should accept both GSS or SSL negotiation requests on a connection
> >> (in either order). Maybe secure_done should be two flags rather than
> >> one?
>
> Peter> I have also seen reports of that. I think your analysis is
> Peter> correct.
>
> I figure something along these lines for the fix. Anyone in a position
> to test this?

At least at first blush, I tend to agree with your analysis and patch.

I'll see about getting this actually set up and tested in the next week
or so (and maybe there's some way to also manage to have a regression
test for it..).

Thanks!

Stephen