On 11/26/17 06:59, Michael Paquier wrote:
> On Tue, Nov 21, 2017 at 1:36 PM, Michael Paquier
> <michael.paquier@gmail.com> wrote:
>> So attached are rebased patches:
>> - 0001 to introduce the connection parameter saslchannelbinding, which
>> allows libpq to enforce the type of channel binding used during an
>> exchange.
>> - 0002 to add tls-endpoint as channel binding type, which is where 0001 shines.
>
> Attached is a rebased patch set, documentation failing to compile. I
> am moving at the same time this patch set to the next commit fest.
I think these are SCRAM channel bindings, not SASL channel bindings, so
the parameter should be named accordingly.
I also wonder whether there should be a mechanism to turn off channel
binding from the client. Right now, there is no way to test the
non-PLUS mechanism in an SSL build.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services