Re: [PoC] Let libpq reject unexpected authentication requests

Jacob Champion <jchampion@timescale.com>

From: Jacob Champion <jchampion@timescale.com>

To: Peter Eisentraut <peter.eisentraut@enterprisedb.com>

Cc: "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>, Michael Paquier <michael@paquier.xyz>, "David G. Johnston" <david.g.johnston@gmail.com>

Date: 2022-09-21T15:33:55Z

Lists: pgsql-hackers

Attachments

v8-0002-Add-sslcertmode-option-for-client-certificates.patch (text/x-patch) patch v8-0002
v8-0001-libpq-let-client-reject-unexpected-auth-methods.patch (text/x-patch) patch v8-0001

On Fri, Sep 16, 2022 at 1:29 PM Jacob Champion <jchampion@timescale.com> wrote:
> I'm happy to implement proofs of concept for that, or any other ideas,
> given the importance of getting this "right enough" the first time.
> Just let me know.

v8 rebases over the postgres_fdw HINT changes; there are no functional
differences.

--Jacob

Commits

libpq: Add sslcertmode option to control client certificates
- 36f40ce2dc66 16.0 landed
Rewrite error message related to sslmode in libpq
- bcaa1fafc82f 16.0 landed
libpq: Add support for require_auth to control authorized auth methods
- 3a465cc6783f 16.0 landed
Run pgindent on libpq's fe-auth.c, fe-auth-scram.c and fe-connect.c
- b6dfee28f2b4 16.0 landed