Skip site navigation (1) Skip section navigation (2)

pgsql: Allow full SSL certificate verification (wherein libpq checks its

From: tgl(at)postgresql(dot)org (Tom Lane)
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: Allow full SSL certificate verification (wherein libpq checks its
Date: 2010-07-14 17:09:45
Message-ID: 20100714170946.012F47541D5@cvs.postgresql.org (view raw or flat)
Thread:
Lists: pgsql-committers
Log Message:
-----------
Allow full SSL certificate verification (wherein libpq checks its host name
parameter against server cert's CN field) to succeed in the case where
both host and hostaddr are specified.  As with the existing precedents
for Kerberos, GSSAPI, SSPI, it is the calling application's responsibility
that host and hostaddr match up --- we just use the host name as given.
Per bug #5559 from Christopher Head.

In passing, make the error handling and messages for the no-host-name-given
failure more consistent among these four cases, and correct a lie in the
documentation: we don't attempt to reverse-lookup host from hostaddr
if host is missing.

Back-patch to 8.4 where SSL cert verification was introduced.

Modified Files:
--------------
    pgsql/doc/src/sgml:
        libpq.sgml (r1.313 -> r1.314)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/doc/src/sgml/libpq.sgml?r1=1.313&r2=1.314)
    pgsql/src/interfaces/libpq:
        fe-auth.c (r1.144 -> r1.145)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/interfaces/libpq/fe-auth.c?r1=1.144&r2=1.145)
        fe-secure.c (r1.135 -> r1.136)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/interfaces/libpq/fe-secure.c?r1=1.135&r2=1.136)
        libpq-int.h (r1.152 -> r1.153)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/interfaces/libpq/libpq-int.h?r1=1.152&r2=1.153)

pgsql-committers by date

Next:From: Tom LaneDate: 2010-07-14 17:09:54
Subject: pgsql: Allow full SSL certificate verification (wherein libpq checks its
Previous:From: Tom LaneDate: 2010-07-13 20:57:19
Subject: pgsql: Teach EXPLAIN to print PARAM_EXEC Params as the referenced

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group