Re: Fwd: [PATCHES] Preliminary GSSAPI Patches

Stefan Kaltenbrunner <stefan@kaltenbrunner.cc>

From: Stefan Kaltenbrunner <stefan@kaltenbrunner.cc>
To: josh@agliodbs.com
Cc: pgsql-hackers@postgresql.org, Magnus Hagander <magnus@hagander.net>, "Henry B. Hotz" <hotz@jpl.nasa.gov>
Date: 2007-05-01T20:10:56Z
Lists: pgsql-hackers
Josh Berkus wrote:
> Magnus,
> 
>> I'd also vote for changing the name of the "non encrypted" version to
>> just "gss" instead of "gss-np".
> 
> I don't.  We'll want to support GSS encryption once we have the code, so we 
> should leave the namespace open to address that.
> 
>> Oh, and I do think putting in GSSAPI authentication only (and not
>> encryption) is the way to go for now, since we can do encryption with
>> OpenSSL. It'll make the changes localized to just the authentication.
> 
> For now, yes.  In the long run, we want to provide users with other methods 
> of encrypted connections than the rather flaky and 
> not-available-on-every-platform OpenSSL.

I'm curious - on what platform is OpenSSL NOT available ?


Stefan