Re: Channel binding not supported using scram-sha-256 passwords

On 2019-02-21 05:47, Michael Paquier wrote:
>              if (conn->ssl_in_use)
> +            {
> +                /*
> +                 * The server has offered SCRAM-SHA-256-PLUS, which is only
> +                 * supported by the client if a hash of the peer certificate
> +                 * can be created.
> +                 */
> +#ifdef HAVE_PGTLS_GET_PEER_CERTIFICATE_HASH
>                  selected_mechanism = SCRAM_SHA_256_PLUS_NAME;
> +#endif
> +            }

Is that right?  Won't we then just select nothing if the macro is not
defined?

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services