Re: Unfriendly handling of pg_hba SSL options with SSL off

Peter Eisentraut <peter_e@gmx.net>

From: Peter Eisentraut <peter_e@gmx.net>

To: Magnus Hagander <magnus@hagander.net>

Cc: Tom Lane <tgl@sss.pgh.pa.us>, Robert Haas <robertmhaas@gmail.com>, pgsql-hackers@postgresql.org

Date: 2011-04-25T18:03:59Z

Lists: pgsql-hackers

On mån, 2011-04-25 at 19:12 +0200, Magnus Hagander wrote:
> We need to be very careful about ignoring *anything* in pg_hba.conf,
> since it's security configuration. Doing it silently is even worse.

You're not really "ignoring" anything.  It's just not going to be a
match.