Horton

Re: BUG #17760: SCRAM authentication fails with "modern" (rsassaPss signature) server certificate

Jacob Champion <jchampion@timescale.com>

View thread View on postgr.es
From: Jacob Champion <jchampion@timescale.com>
To: Gunnar Nick Bluth <gunnar.bluth@pro-open.de>
Cc: Michael Paquier <michael@paquier.xyz>, Heikki Linnakangas <hlinnaka@iki.fi>, pgsql-bugs@lists.postgresql.org
Date: 2023-02-13T17:44:03Z
Lists: pgsql-bugs 
On Mon, Feb 13, 2023 at 4:54 AM Gunnar "Nick" Bluth
<gunnar.bluth@pro-open.de> wrote:
> FWIW:
> I only understand a fraction of the underlying crypto, but the patch LGTM!

LGTM too, thanks Michael! I tested against LibreSSL 3.5.3 to
double-check the fallback.

--Jacob

Commits

  1. Fix handling of SCRAM-SHA-256's channel binding with RSA-PSS certificates