Re: [JDBC] Channel binding support for SCRAM-SHA-256

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>
Cc: Stephen Frost <sfrost(at)snowman(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Robert Haas <robertmhaas(at)gmail(dot)com>, Álvaro Hernández Tortosa <aht(at)8kdata(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>, PostgreSQL JDBC List <pgsql-jdbc(at)postgresql(dot)org>
Subject: Re: [JDBC] Channel binding support for SCRAM-SHA-256
Date: 2017-05-30 19:54:22
Message-ID: 97833037-06BB-465E-ADAB-8709CFF2EF8C@yesql.se
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-jdbc

> On 30 May 2017, at 18:25, Michael Paquier <michael(dot)paquier(at)gmail(dot)com> wrote:
>
> On macos though it is another story, I am not seeing anything:
> https://developer.apple.com/reference/security/secure_transport#symbols

The Secure Transport documentation unfortunately excel at being incomplete and
hard to search in. That being said, I think you’re right, AFAICT there is no
published API for this (SSLProcessFinished() seems like the best match but is
not public).

> Depending on the SSL implementation the server is compiled with, it
> will be up to the backend to decide if it should advertise to the
> client the -PLUS mechanism or not, so we can stay modular here.

+1

cheers ./daniel

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Daniel Gustafsson 2017-05-30 20:04:53 Re: [JDBC] Channel binding support for SCRAM-SHA-256
Previous Message Magnus Hagander 2017-05-30 19:32:30 Re: pg_basebackup error: replication slot "pg_basebackup_2194" already exists

Browse pgsql-jdbc by date

  From Date Subject
Next Message Daniel Gustafsson 2017-05-30 20:04:53 Re: [JDBC] Channel binding support for SCRAM-SHA-256
Previous Message Stephen Frost 2017-05-30 17:00:36 Re: [HACKERS] Channel binding support for SCRAM-SHA-256