Skip site navigation (1) Skip section navigation (2)

Re: BUG #4340: SECURITY: Is SSL Doing Anything?

From: Alvaro Herrera <alvherre(at)commandprompt(dot)com>
To: Bruce Momjian <bruce(at)momjian(dot)us>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Dan Kaminsky <dan(at)doxpara(dot)com>, pgsql-bugs(at)postgresql(dot)org
Subject: Re: BUG #4340: SECURITY: Is SSL Doing Anything?
Date: 2008-08-18 21:56:51
Message-ID: 20080818215651.GD4454@alvh.no-ip.org (view raw or flat)
Thread:
Lists: pgsql-bugs
Bruce Momjian wrote:
> Tom Lane wrote:
> > Dan Kaminsky <dan(at)doxpara(dot)com> writes:

> > >     Second, are you saying verify_peer doesn't do anything for 
> > > authentication?  Are you sure about that?  There's really little reason 
> > > otherwise for the call to exist.
> > 
> > Er, we don't *have* a verify_peer callback.
> 
> Uh, the user reported running Postgres 7.3 and we have improved SSL
> quite a bit since then so perhaps an upgrade and reading the current
> docs would help the user.

The code is identical in HEAD, according to a quick read I did last
week.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.

In response to

Responses

pgsql-bugs by date

Next:From: Dan BoeriuDate: 2008-08-18 22:48:21
Subject: BUG #4363: ts_query bug
Previous:From: Tom LaneDate: 2008-08-17 15:07:40
Subject: Re: BUG #4362: Casts from base types to composite types don't work.

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group