Skip site navigation (1) Skip section navigation (2)

Re: SSL over Unix-domain sockets

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: SSL over Unix-domain sockets
Date: 2008-01-05 13:13:46
Message-ID: 200801051413.46898.peter_e@gmx.net (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-patches
Bruce Momjian wrote:
> Peter Eisentraut wrote:
> > Using the attached patch, SSL will act over Unix-domain sockets.  AFAICT,
> > this just works.  I didn't find a way to sniff a Unix-domain socket,
> > however.
> >
> > How should we proceed with this?
>
> I am confused by the shortness of this patch.  Right now pg_hba.conf
> has:
>
> 	# host       DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
> 	# hostssl    DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
> 	# hostnossl  DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
>
> These are all for TCP connections.  How do we handle 'local' SSL
> connection specification?  Do we want to provide similar functionality
> for local connections?

Here is a patch that implements "localssl" as well.  It is quite simple.  
(Note that the code in hba.c is all copy and paste.)

-- 
Peter Eisentraut
http://developer.postgresql.org/~petere/

Attachment: localssl.patch
Description: text/x-diff (6.7 KB)

In response to

Responses

pgsql-hackers by date

Next:From: jMartinezDate: 2008-01-05 13:56:57
Subject: pg 8.3 Windows installer suggestion
Previous:From: Peter EisentrautDate: 2008-01-05 12:58:36
Subject: Re: [PATCH] pg_hba.conf.sample: mention www.postgresql.org

pgsql-patches by date

Next:From: Tom LaneDate: 2008-01-05 17:39:08
Subject: Re: SSL over Unix-domain sockets
Previous:From: Simon RiggsDate: 2008-01-05 12:09:44
Subject: Re: Archiver behavior at shutdown

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group