Skip site navigation (1) Skip section navigation (2)

Re: SSL over Unix-domain sockets

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: SSL over Unix-domain sockets
Date: 2008-01-04 17:18:34
Message-ID: 200801041718.m04HIYv16139@momjian.us (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-patches
Peter Eisentraut wrote:
> Using the attached patch, SSL will act over Unix-domain sockets.  AFAICT, this 
> just works.  I didn't find a way to sniff a Unix-domain socket, however.
> 
> How should we proceed with this?

I am confused by the shortness of this patch.  Right now pg_hba.conf
has:

	# host       DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
	# hostssl    DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
	# hostnossl  DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]

These are all for TCP connections.  How do we handle 'local' SSL
connection specification?  Do we want to provide similar functionality
for local connections?

-- 
  Bruce Momjian  <bruce(at)momjian(dot)us>        http://momjian.us
  EnterpriseDB                             http://postgres.enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +

In response to

Responses

pgsql-hackers by date

Next:From: Peter EisentrautDate: 2008-01-04 17:35:02
Subject: Re: SSL over Unix-domain sockets
Previous:From: Martijn van OosterhoutDate: 2008-01-04 16:36:54
Subject: Re: SSL over Unix-domain sockets

pgsql-patches by date

Next:From: Peter EisentrautDate: 2008-01-04 17:35:02
Subject: Re: SSL over Unix-domain sockets
Previous:From: Martijn van OosterhoutDate: 2008-01-04 16:36:54
Subject: Re: SSL over Unix-domain sockets

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group