From: | Michael Paquier <michael(dot)paquier(at)gmail(dot)com> |
---|---|
To: | Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com> |
Cc: | Álvaro Hernández Tortosa <aht(at)8kdata(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: [JDBC] [HACKERS] Channel binding support for SCRAM-SHA-256 |
Date: | 2017-11-14 08:55:45 |
Message-ID: | CAB7nPqQbxmAB1_1twHHnEYfvdCvFetb=A+MSJvpjrCL-56jycA@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers pgsql-jdbc |
On Tue, Oct 10, 2017 at 10:12 PM, Michael Paquier
<michael(dot)paquier(at)gmail(dot)com> wrote:
> Attached is a new patch set with the comments from above. On top of
> that, I have changed a couple of things:
> - 0001 is unchanged, still the same refactoring for the SSL tests.
> - 0002 implements tls-unique, now including tests using the default
> channel binding tls-unique with something in the SSL test suite. This
> patch also now introduces all the infrastructure to plug in correctly
> new libpq parameters and more channel binding types.
> - 0003 is shorter, and introduces a set of libpq parameters useful for
> tests, taking advantage of 0002. Another case where the connection
> parameter saslname is useful is to enforce not using channel binding
> when connecting to a v10 server using a SSL context with a v11 libpq.
> - 0004 introduces tls-server-end-point.
> This has required some work to get it shaped as wanted, I am adding it
> to the next CF, as version 2.
Documentation in protocol.sgml has rotten again as markups need proper
handling. So rebased.
--
Michael
Attachment | Content-Type | Size |
---|---|---|
0001-Refactor-routine-to-test-connection-to-SSL-server.patch | application/octet-stream | 12.6 KB |
0002-Support-channel-binding-tls-unique-in-SCRAM.patch | application/octet-stream | 37.1 KB |
0003-Add-connection-parameters-saslname-and-saslchannelbi.patch | application/octet-stream | 6.5 KB |
0004-Implement-channel-binding-tls-server-end-point-for-S.patch | application/octet-stream | 17.3 KB |
From | Date | Subject | |
---|---|---|---|
Next Message | Moon Insung | 2017-11-14 08:57:00 | [PATCH]pg_buffercache add a buffer state column, Add fuction to decode buffer state |
Previous Message | Pavel Golub | 2017-11-14 08:55:40 | Re: Migration to PGLister - After |
From | Date | Subject | |
---|---|---|---|
Next Message | Christina Simpson | 2017-11-15 17:24:45 | Error 'Received resultset tuples, but no field structure for them' on queries subsequent to an error |
Previous Message | Michael Glaesemann | 2017-11-12 19:13:41 | [pgjdbc/pgjdbc] 634e15: refactor: use TypeInfo getPGArrayType instead of m... |