Re: Negotiating the SCRAM channel binding type

Поиск
Список
Период
Сортировка
От Michael Paquier
Тема Re: Negotiating the SCRAM channel binding type
Дата
Msg-id 20180805124534.GB22007@paquier.xyz
обсуждение исходный текст
Ответ на Re: Negotiating the SCRAM channel binding type  (Heikki Linnakangas <hlinnaka@iki.fi>)
Ответы Re: Negotiating the SCRAM channel binding type
Re: Negotiating the SCRAM channel binding type
Список pgsql-hackers
On Sun, Aug 05, 2018 at 03:30:43PM +0300, Heikki Linnakangas wrote:
> That test just tested that the scram_channel_binding libpq option works, but
> I removed the option. I know you wanted to keep it as a feature flag, but as
> discussed earlier, I don't think that'd be useful.

Sorry for the noise, I missed that there is still the test "Basic SCRAM
authentication with SSL" so that would be fine.  I would have preferred
keeping around the negative test so as we don't break SSL connections
when the client enforced cbind_flag to 'n' as that would be useful when
adding new SSL implementations as that would avoid manual tests which
people will most likely forget, but well...

You can remove $supports_tls_server_end_point in 002_scram.pl by the
way.  Should I remove it or perhaps you would prefer to do it?
--
Michael

Вложения

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Heikki Linnakangas
Дата:
Сообщение: Re: Negotiating the SCRAM channel binding type
Следующее
От: Heikki Linnakangas
Дата:
Сообщение: Re: [PATCH v18] GSSAPI encryption support