[PATCH v1] GSSAPI encryption support

Robbie Harwood <rharwood@redhat.com>

From: Robbie Harwood <rharwood@redhat.com>

To: pgsql-hackers@postgresql.org

Date: 2015-07-02T18:22:13Z

Lists: pgsql-hackers

Attachments

v1-1-build-Define-with_gssapi-for-use-in-Makefiles.patch (text/x-diff) patch v1
v1-2-client-Disable-GSS-encryption-on-old-servers.patch (text/x-diff) patch v1
v1-3-client-GSSAPI-encryption-and-decryption.patch (text/x-diff) patch v1
v1-4-server-GSSAPI-encryption-and-decryption.patch (text/x-diff) patch v1
v1-5-Error-when-receiving-plaintext-on-GSS-encrypted-conn.patch (text/x-diff) patch v1
v1-6-server-hba-option-for-requiring-GSSAPI-encryption.patch (text/x-diff) patch v1
v1-7-client-gss_enc_require-parameter-to-force-GSS-encryp.patch (text/x-diff) patch v1
v1-8-Document-GSSAPI-encryption.patch (text/x-diff) patch v1

Hello -hackers,

As previously discussed on this list, I have coded up GSSAPI encryption
support.  If it is easier for anyone, this code is also available for
viewing on my github:
https://github.com/postgres/postgres/compare/master...frozencemetery:feature/gssencrypt

Fallback support is present in both directions for talking to old client
and old servers; GSSAPI encryption is by default auto-upgraded to where
available (for compatibility), but both client and server contain
settings for requiring it.

There are 8 commits in this series; I have tried to err on the side of
creating too much separation rather than too little.  A patch for each
is attached.  This is v1 of the series.

Thanks!

Commits

GSSAPI encryption support
- b0b39f72b990 12.0 landed
Fix typo
- 57c932475504 9.6.0 cited