Bruce Momjian wrote:
> Peter Eisentraut wrote:
> > Using the attached patch, SSL will act over Unix-domain sockets. AFAICT,
> > this just works. I didn't find a way to sniff a Unix-domain socket,
> > however.
> > How should we proceed with this?
> I am confused by the shortness of this patch. Right now pg_hba.conf
> # host DATABASE USER CIDR-ADDRESS METHOD [OPTION]
> # hostssl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
> # hostnossl DATABASE USER CIDR-ADDRESS METHOD [OPTION]
> These are all for TCP connections. How do we handle 'local' SSL
> connection specification? Do we want to provide similar functionality
> for local connections?
Here is a patch that implements "localssl" as well. It is quite simple.
(Note that the code in hba.c is all copy and paste.)
In response to
pgsql-hackers by date
|Next:||From: jMartinez||Date: 2008-01-05 13:56:57|
|Subject: pg 8.3 Windows installer suggestion|
|Previous:||From: Peter Eisentraut||Date: 2008-01-05 12:58:36|
|Subject: Re: [PATCH] pg_hba.conf.sample: mention www.postgresql.org|
pgsql-patches by date
|Next:||From: Tom Lane||Date: 2008-01-05 17:39:08|
|Subject: Re: SSL over Unix-domain sockets |
|Previous:||From: Simon Riggs||Date: 2008-01-05 12:09:44|
|Subject: Re: Archiver behavior at shutdown|