Add libpq connection parameter "scram_channel_binding"
Peter Eisentraut <peter_e@gmx.net>
Add libpq connection parameter "scram_channel_binding" This parameter can be used to enforce the channel binding type used during a SCRAM authentication. This can be useful to check code paths where an invalid channel binding type is used by a client and will be even more useful to allow testing other channel binding types when they are added. The default value is tls-unique, which is what RFC 5802 specifies. Clients can optionally specify an empty value, which has as effect to not use channel binding and use SCRAM-SHA-256 as chosen SASL mechanism. More tests for SCRAM and channel binding are added to the SSL test suite. Author: Author: Michael Paquier <michael.paquier@gmail.com>
Files
| Path | Change | +/− |
|---|---|---|
| doc/src/sgml/libpq.sgml | modified | +24 −0 |
| src/interfaces/libpq/fe-auth.c | modified | +6 −3 |
| src/interfaces/libpq/fe-auth.h | modified | +1 −0 |
| src/interfaces/libpq/fe-auth-scram.c | modified | +15 −5 |
| src/interfaces/libpq/fe-connect.c | modified | +9 −0 |
| src/interfaces/libpq/libpq-int.h | modified | +1 −0 |
| src/test/ssl/t/002_scram.pl | modified | +13 −1 |