Re: Experiments with Postgres and SSL

Heikki Linnakangas <hlinnaka@iki.fi>

From: Heikki Linnakangas <hlinnaka@iki.fi>

To: Matthias van de Meent <boekewurm+postgres@gmail.com>

Cc: Jacob Champion <jacob.champion@enterprisedb.com>, PostgreSQL-development <pgsql-hackers@postgresql.org>, Greg Stark <stark@mit.edu>, Andrey Borodin <amborodin86@gmail.com>, Jacob Champion <jchampion@timescale.com>, Vladimir Sitnikov <sitnikov.vladimir@gmail.com>, Michael Paquier <michael@paquier.xyz>

Date: 2024-03-28T12:37:07Z

Lists: pgsql-hackers

Attachments

v9-0001-Move-Kerberos-module.patch (text/x-patch) patch v9-0001
v9-0002-Add-tests-for-libpq-choosing-encryption-mode.patch (text/x-patch) patch v9-0002
v9-0003-Direct-SSL-connections-client-and-server-support.patch (text/x-patch) patch v9-0003
v9-0004-Direct-SSL-connections-ALPN-support.patch (text/x-patch) patch v9-0004
v9-0005-Add-tests-for-sslnegotiation.patch (text/x-patch) patch v9-0005
v9-0006-WIP-refactor-state-machine-in-libpq.patch (text/x-patch) patch v9-0006

On 28/03/2024 13:15, Matthias van de Meent wrote:
> On Tue, 5 Mar 2024 at 15:08, Heikki Linnakangas <hlinnaka@iki.fi> wrote:
>>
>> I hope I didn't joggle your elbow reviewing this, Jacob, but I spent
>> some time rebase and fix various little things:
> 
> With the recent changes to backend startup committed by you, this
> patchset has gotten major apply failures.
> 
> Could you provide a new version of the patchset so that it can be
> reviewed in the context of current HEAD?

Here you are.

-- 
Heikki Linnakangas
Neon (https://neon.tech)

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Enhance libpq encryption negotiation tests with new GUC
- 705843d294d5 17.0 landed
With gssencmode='require', check credential cache before connecting
- 20f9b61cc192 17.0 landed
Add tests for libpq gssencmode and sslmode options
- 1169920ff770 17.0 landed
Move Kerberos module
- 9f899562d420 17.0 landed
Give nicer error message when connecting to a v10 server requiring SCRAM.
- 96d0f988b150 9.4.12 cited