Re: SSL cleanups/hostname verification

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: SSL cleanups/hostname verification
Дата
Msg-id 18289.1224593255@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: SSL cleanups/hostname verification  (Gregory Stark <stark@enterprisedb.com>)
Ответы Re: SSL cleanups/hostname verification  (Andrew Sullivan <ajs@commandprompt.com>)
Re: SSL cleanups/hostname verification  (Peter Eisentraut <peter_e@gmx.net>)
Список pgsql-hackers
Gregory Stark <stark@enterprisedb.com> writes:
> Sort of. SSH requires you to install the certificate of the server locally
> before connecting. If you don't it pops up a big warning and asks if you want
> to install it. On subsequent connections it looks up the key for the name of
> the host you're trying to connect to and insists it match. If it doesn't it
> pops up a *huge* error and refuses to connect.

Um, IIRC what it's checking there is the server's key signature, which
has nada to do with certificates.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Gregory Stark
Дата:
Сообщение: Re: SSL cleanups/hostname verification
Следующее
От: Decibel!
Дата:
Сообщение: Re: contrib/pg_stat_statements