Re: sslmode=require fallback
От
Magnus Hagander
Тема
Re: sslmode=require fallback
Дата
Msg-id
CABUevEz2c5b7WNfd+pCkayM-Dh4bjME7xa3XXFaZv0d5HHQr_w@mail.gmail.com
Ответ на
Re: sslmode=require fallback (Bruce Momjian)
Список
Дерево обсуждения
sslmode=require fallback Jakob Egger <jakob@eggerapps.at>
Re: sslmode=require fallback Magnus Hagander <magnus@hagander.net>
Re: sslmode=require fallback Bruce Momjian <bruce@momjian.us>
Re: sslmode=require fallback Magnus Hagander <magnus@hagander.net>
Re: sslmode=require fallback Robert Haas <robertmhaas@gmail.com>
Re: sslmode=require fallback Tom Lane <tgl@sss.pgh.pa.us>
Re: sslmode=require fallback Robert Haas <robertmhaas@gmail.com>
Re: sslmode=require fallback Tom Lane <tgl@sss.pgh.pa.us>
Re: sslmode=require fallback Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: sslmode=require fallback Magnus Hagander <magnus@hagander.net>
Re: sslmode=require fallback Tom Lane <tgl@sss.pgh.pa.us>
Re: sslmode=require fallback Andrew Dunstan <andrew@dunslane.net>
Re: sslmode=require fallback Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: sslmode=require fallback Christoph Berg <myon@debian.org>
Re: sslmode=require fallback Magnus Hagander <magnus@hagander.net>
Re: sslmode=require fallback Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: sslmode=require fallback Bruce Momjian <bruce@momjian.us>
Re: sslmode=require fallback Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: sslmode=require fallback Bruce Momjian <bruce@momjian.us>
Re: sslmode=require fallback Jeff Janes <jeff.janes@gmail.com>
Re: sslmode=require fallback Bruce Momjian <bruce@momjian.us>
Re: sslmode=require fallback Greg Stark <stark@mit.edu>
Re: sslmode=require fallback Magnus Hagander <magnus@hagander.net>
Re: sslmode=require fallback Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: sslmode=require fallback Magnus Hagander <magnus@hagander.net>
Re: sslmode=require fallback "Daniel Verite" <daniel@manitou-mail.org>
Re: sslmode=require fallback Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: sslmode=require fallback Greg Stark <stark@mit.edu>
Re: sslmode=require fallback Christoph Berg <cb@df7cb.de>
Re: sslmode=require fallback Magnus Hagander <magnus@hagander.net>
Re: sslmode=require fallback Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: sslmode=require fallback Robert Haas <robertmhaas@gmail.com>
On Thu, Jun 23, 2016 at 1:50 AM, Bruce Momjian <bruce@momjian.us> wrote:
On Thu, Jun 16, 2016 at 10:42:56AM +0200, Magnus Hagander wrote:
> However, if this is the expected behavior, the documentation at https://
> www.postgresql.org/docs/current/static/libpq-ssl.html should be updated to
> make this more clear. It should be made clear that the existence of the
> file ~/.postgresql/root.crt changes the behavior of sslmode=require and
> sslmode=prefer.
>
>
>
> Agreed. It's basically backwards compatibility with something that was badly
> documented in the first place :) That's not a particularly strong argument for
> the way it is. Clarifying the documentation would definitely be a good
> improvement.
Does this have to remain backward-compatible forever?
In general no. But I think the problem here is that if somebody misses the removal of something backwards compatible, it turns off their security. Which is not good...
В списке pgsql-hackers по дате отправления
