Re: [JDBC] [HACKERS] Channel binding support for SCRAM-SHA-256

From: Michael Paquier <michael(dot)paquier(at)gmail(dot)com>
To: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
Cc: Álvaro Hernández Tortosa <aht(at)8kdata(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [JDBC] [HACKERS] Channel binding support for SCRAM-SHA-256
Date: 2017-11-14 08:55:45
Message-ID: CAB7nPqQbxmAB1_1twHHnEYfvdCvFetb=A+MSJvpjrCL-56jycA@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-jdbc

On Tue, Oct 10, 2017 at 10:12 PM, Michael Paquier
<michael(dot)paquier(at)gmail(dot)com> wrote:
> Attached is a new patch set with the comments from above. On top of
> that, I have changed a couple of things:
> - 0001 is unchanged, still the same refactoring for the SSL tests.
> - 0002 implements tls-unique, now including tests using the default
> channel binding tls-unique with something in the SSL test suite. This
> patch also now introduces all the infrastructure to plug in correctly
> new libpq parameters and more channel binding types.
> - 0003 is shorter, and introduces a set of libpq parameters useful for
> tests, taking advantage of 0002. Another case where the connection
> parameter saslname is useful is to enforce not using channel binding
> when connecting to a v10 server using a SSL context with a v11 libpq.
> - 0004 introduces tls-server-end-point.
> This has required some work to get it shaped as wanted, I am adding it
> to the next CF, as version 2.

Documentation in protocol.sgml has rotten again as markups need proper
handling. So rebased.
--
Michael

Attachment Content-Type Size
0001-Refactor-routine-to-test-connection-to-SSL-server.patch application/octet-stream 12.6 KB
0002-Support-channel-binding-tls-unique-in-SCRAM.patch application/octet-stream 37.1 KB
0003-Add-connection-parameters-saslname-and-saslchannelbi.patch application/octet-stream 6.5 KB
0004-Implement-channel-binding-tls-server-end-point-for-S.patch application/octet-stream 17.3 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Moon Insung 2017-11-14 08:57:00 [PATCH]pg_buffercache add a buffer state column, Add fuction to decode buffer state
Previous Message Pavel Golub 2017-11-14 08:55:40 Re: Migration to PGLister - After

Browse pgsql-jdbc by date

  From Date Subject
Next Message Christina Simpson 2017-11-15 17:24:45 Error 'Received resultset tuples, but no field structure for them' on queries subsequent to an error
Previous Message Michael Glaesemann 2017-11-12 19:13:41 [pgjdbc/pgjdbc] 634e15: refactor: use TypeInfo getPGArrayType instead of m...