[PATCH v7] GSSAPI encryption support
Robbie Harwood <rharwood@redhat.com>
From: Robbie Harwood <rharwood@redhat.com>
To: pgsql-hackers@postgresql.org
Date: 2016-03-14T23:11:42Z
Lists: pgsql-hackers
Attachments
- v7-0001-Move-common-GSSAPI-code-into-its-own-files.patch (text/x-diff) patch v7-0001
- v7-0002-Connection-encryption-support-for-GSSAPI.patch (text/x-diff) patch v7-0002
- v7-0003-GSSAPI-authentication-cleanup.patch (text/x-diff) patch v7-0003
Hello friends,
New week, new version. GitHub link:
https://github.com/frozencemetery/postgres/tree/feature/gssencrypt7
Changes in this version:
- Removed extra whitespace in auth code movement.
- Fixed connection desync issue. A diff of this and v6 will reveal
three issues:
- First, that pg_GSS_read() didn't properly handle having a full
buffer when called because pqsecure_raw_read() doesn't handle reads of
size 0. I've elected to change my own code here only, but it may be
desirable to change pqsecure_raw_read() as well depending on whether
other people are likely to hit that.
- Second, that I was shunting data into the wrong buffer (don't know
how this was overlooked; it has "write" right there in the name).
- Third, that I'm now immediately decrypting that data into
conn->inBuffer rather than deferring that step until later. This
removes the hang because now the connection will not erroneously get
stuck polling while data is buffered.
Thanks!
Commits
-
GSSAPI encryption support
- b0b39f72b990 12.0 landed
-
Fix typo
- 57c932475504 9.6.0 cited