ssl.v2.patch

application/octet-stream

Download

Patch

Same data as JSON: GET /api/v1/attachments/:id/patch the parsed metadata as JSON — format, series position, per-file stats; never the diff bytes. API reference →

Format: unified

Series: patch v2

File	+	−
doc/src/sgml/libpq.sgml	0	0
src/interfaces/libpq/fe-connect.c	0	0
src/interfaces/libpq/fe-secure.c	0	0
src/interfaces/libpq/libpq-int.h	0	0

diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml
new file mode 100644
index 3d5f98b..fb7075a
*** a/doc/src/sgml/libpq.sgml
--- b/doc/src/sgml/libpq.sgml
*************** PGconn *PQconnectdbParams(const char * c
*** 494,499 ****
--- 494,520 ----
           </listitem>
          </varlistentry>
  
+         <varlistentry id="libpq-connect-sslcompression" xreflabel="sslcompression">
+          <term><literal>sslcompression</literal></term>
+          <listitem>
+           <para>
+            If set to 1 (default), data sent over SSL connections will be
+            compressed if the SSL library supports compression (from
+            <productname>OpenSSL</> 0.9.8 on).
+            If set to 0, compression will be disabled if the SSL library
+            supports disabling compression (from <productname>OpenSSL</>
+            1.0.0 on).
+            This parameter is ignored if an SSL connection is not made.
+           </para>
+           <para>
+            Compression uses CPU time, but can improve throughput if
+            the network is the bottleneck.
+            Disabling compression improves response time and throughput
+            if CPU time is the limiting factor.
+           </para>
+          </listitem>
+         </varlistentry>
+ 
          <varlistentry id="libpq-connect-sslcert" xreflabel="sslcert">
           <term><literal>sslcert</literal></term>
           <listitem>
*************** myEventProc(PGEventId evtId, void *evtIn
*** 6311,6316 ****
--- 6332,6347 ----
      <listitem>
       <para>
        <indexterm>
+        <primary><envar>PGSSLCOMPRESSION</envar></primary>
+       </indexterm>
+       <envar>PGSSLCOMPRESSION</envar> behaves the same as the <xref
+       linkend="libpq-connect-sslcompression"> connection parameter.
+      </para>
+     </listitem>
+ 
+     <listitem>
+      <para>
+       <indexterm>
         <primary><envar>PGSSLCERT</envar></primary>
        </indexterm>
        <envar>PGSSLCERT</envar> behaves the same as the <xref
diff --git a/src/interfaces/libpq/fe-connect.c b/src/interfaces/libpq/fe-connect.c
new file mode 100644
index ed9dce9..50f3f83
*** a/src/interfaces/libpq/fe-connect.c
--- b/src/interfaces/libpq/fe-connect.c
*************** static const PQconninfoOption PQconninfo
*** 222,227 ****
--- 222,230 ----
  	{"sslmode", "PGSSLMODE", DefaultSSLMode, NULL,
  	"SSL-Mode", "", 8},			/* sizeof("disable") == 8 */
  
+ 	{"sslcompression", "PGSSLCOMPRESSION", "1", NULL,
+ 	"SSL-Compression", "", 1},
+ 
  	{"sslcert", "PGSSLCERT", NULL, NULL,
  	"SSL-Client-Cert", "", 64},
  
*************** fillPGconn(PGconn *conn, PQconninfoOptio
*** 621,626 ****
--- 624,631 ----
  	conn->keepalives_count = tmp ? strdup(tmp) : NULL;
  	tmp = conninfo_getval(connOptions, "sslmode");
  	conn->sslmode = tmp ? strdup(tmp) : NULL;
+ 	tmp = conninfo_getval(connOptions, "sslcompression");
+ 	conn->sslcompression = tmp ? strdup(tmp) : NULL;
  	tmp = conninfo_getval(connOptions, "sslkey");
  	conn->sslkey = tmp ? strdup(tmp) : NULL;
  	tmp = conninfo_getval(connOptions, "sslcert");
diff --git a/src/interfaces/libpq/fe-secure.c b/src/interfaces/libpq/fe-secure.c
new file mode 100644
index 9c6ced6..c6963be
*** a/src/interfaces/libpq/fe-secure.c
--- b/src/interfaces/libpq/fe-secure.c
*************** initialize_SSL(PGconn *conn)
*** 1292,1297 ****
--- 1292,1307 ----
  		}
  	}
  
+ 	/*
+ 	 * If the OpenSSL version used supports it (from 1.0.0 on)
+ 	 * and the user requested it, disable SSL compression.
+ 	 */
+ #ifdef SSL_OP_NO_COMPRESSION
+ 	if (conn->sslcompression && conn->sslcompression[0] == '0') {
+ 		SSL_set_options(conn->ssl, SSL_OP_NO_COMPRESSION);
+ 	}
+ #endif
+ 
  	return 0;
  }
  
diff --git a/src/interfaces/libpq/libpq-int.h b/src/interfaces/libpq/libpq-int.h
new file mode 100644
index d56ef5d..64dfcb2
*** a/src/interfaces/libpq/libpq-int.h
--- b/src/interfaces/libpq/libpq-int.h
*************** struct pg_conn
*** 310,315 ****
--- 310,316 ----
  	char	   *keepalives_count;		/* maximum number of TCP keepalive
  										 * retransmits */
  	char	   *sslmode;		/* SSL mode (require,prefer,allow,disable) */
+ 	char	   *sslcompression;	/* SSL compression (0 or 1) */
  	char	   *sslkey;			/* client key filename */
  	char	   *sslcert;		/* client certificate filename */
  	char	   *sslrootcert;	/* root certificate filename */