| From: | Fujii Masao <fujii(at)postgresql(dot)org> |
|---|---|
| To: | pgsql-committers(at)lists(dot)postgresql(dot)org |
| Subject: | pgsql: Warn on password auth with MD5-encrypted passwords |
| Date: | 2026-07-01 11:58:46 |
| Message-ID: | E1wetaZ-000ubB-0X@gemulon.postgresql.org |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-committers |
Warn on password auth with MD5-encrypted passwords
Commit bc60ee860 added a connection warning after successful MD5
authentication, but only for the md5 authentication method. A role with
an MD5-encrypted password can also authenticate via the password method,
which left that path without the same deprecation warning.
Emit the MD5 deprecation connection warning after successful
password authentication as well, when the stored password is
MD5-encrypted.
Backpatch to v19, where the MD5 connection warning was introduced.
Author: Fujii Masao <masao(dot)fujii(at)gmail(dot)com>
Reviewed-by: Chao Li <li(dot)evan(dot)chao(at)gmail(dot)com>
Reviewed-by: Japin Li <japinli(at)hotmail(dot)com>
Discussion: https://postgr.es/m/CAHGQGwGkWfn5rtHzvdRbVk+PCefQU3gun3hc7QnaMXHFa5Bu3w@mail.gmail.com
Backpatch-through: 19
Branch
------
REL_19_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/e57a865dc7003f75d3a2d080603c95dd469b89a5
Modified Files
--------------
doc/src/sgml/config.sgml | 3 ++-
src/backend/libpq/auth.c | 33 +++++++++++++++++++++++++++++++
src/backend/libpq/crypt.c | 22 ---------------------
src/test/authentication/t/001_password.pl | 10 ++++++++++
4 files changed, 45 insertions(+), 23 deletions(-)
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Fujii Masao | 2026-07-01 14:07:25 | pgsql: Clear base backup progress on backup failure |
| Previous Message | Fujii Masao | 2026-07-01 11:58:32 | pgsql: Warn on password auth with MD5-encrypted passwords |