Re: Password identifiers, protocol aging and SCRAM protocol

Michael Paquier <michael.paquier@gmail.com>

View thread View on postgr.es

From: Michael Paquier <michael.paquier@gmail.com>

To: David Steele <david@pgmasters.net>

Cc: PostgreSQL mailing lists <pgsql-hackers@postgresql.org>

Date: 2016-03-14T23:07:53Z

Lists: pgsql-hackers

Attachments

0001-Add-facility-to-store-multiple-password-verifiers.patch (text/x-patch) patch 0001
0002-Introduce-password_protocols.patch (text/x-patch) patch 0002
0003-Add-pg_auth_verifiers_sanitize.patch (text/x-patch) patch 0003
0004-Remove-password-verifiers-for-unsupported-protocols-.patch (text/x-patch) patch 0004
0005-Move-sha1.c-to-src-common.patch (text/x-patch) patch 0005
0006-Refactor-sendAuthRequest.patch (text/x-patch) patch 0006
0007-Refactor-RandomSalt-to-handle-salts-of-different-len.patch (text/x-patch) patch 0007
0008-Move-encoding-routines-to-src-common.patch (text/x-patch) patch 0008
0009-SCRAM-authentication.patch (text/x-patch) patch 0009

On Mon, Mar 14, 2016 at 5:06 PM, Michael Paquier
<michael.paquier@gmail.com> wrote:
> On Mon, Mar 14, 2016 at 4:32 PM, David Steele <david@pgmasters.net> wrote:
>> Could you provide an updated set of patches for review?  Meanwhile I am
>> marking this as "waiting for author".
>
> Sure. I'll provide them shortly with all the comments addressed. Up to
> now I just had a couple of comments about docs and whitespaces, so I
> didn't really bother sending a new set, but this meritates a rebase.

And here they are. I have addressed the documentation and the
whitespaces reported up to now at the same time.
-- 
Michael

Commits

Support SCRAM-SHA-256 authentication (RFC 5802 and 7677).
- 818fd4a67d61 10.0 landed
Refactor SHA2 functions and move them to src/common/.
- 273c458a2b3a 10.0 landed
Replace isMD5() with a more future-proof way to check if pw is encrypted.
- dbd69118c05d 10.0 landed
Remove bogus notice that older clients might not work with MD5 passwords.
- 7e3ae5455948 9.2.20 landed
- 470af1f41c8b 9.3.16 landed
- ada2cdb61015 9.4.11 landed
- 65a7f190b253 9.5.6 landed
- 7546c135dc30 9.6.2 landed
- 31c54096a18f 10.0 landed
Refactor the code for verifying user's password.
- e7f051b8f9a6 10.0 landed
Replace PostmasterRandom() with a stronger source, second attempt.
- fe0a0b5993df 10.0 landed
Remove support for (insecure) crypt authentication.
- 53a5026b5cb3 8.4.0 cited