On 27/10/2020 22:07, Daniel Gustafsson wrote:
> /*
> * Track whether the NSS database has a password set or not. There is no API
> * function for retrieving password status, so we simply flip this to true in
> * case NSS invoked the password callback - as that will only happen in case
> * there is a password. The reason for tracking this is that there are calls
> * which require a password parameter, but doesn't use the callbacks provided,
> * so we must call the callback on behalf of these.
> */
> static bool has_password = false;
This is set in PQssl_passwd_cb function, but never reset. That seems
wrong. The NSS database used in one connection might have a password,
while another one might not. Or have I completely misunderstood this?
- Heikki