Re: Patch: Don't set LoadedSSL unless secure_initialize succeeds

Поиск
Список
Период
Сортировка
От Daniel Gustafsson
Тема Re: Patch: Don't set LoadedSSL unless secure_initialize succeeds
Дата
Msg-id 25099E17-3B79-45F2-A272-82073BE4760C@yesql.se
обсуждение исходный текст
Ответ на Patch: Don't set LoadedSSL unless secure_initialize succeeds  (Gurjeet Singh <gurjeet@singh.im>)
Ответы Re: Patch: Don't set LoadedSSL unless secure_initialize succeeds  (Michael Paquier <michael@paquier.xyz>)
Re: Patch: Don't set LoadedSSL unless secure_initialize succeeds  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: Patch: Don't set LoadedSSL unless secure_initialize succeeds  (Gurjeet Singh <gurjeet@singh.im>)
Список pgsql-hackers
> On 22 May 2022, at 08:41, Gurjeet Singh <gurjeet@singh.im> wrote:

> The initialization in PostmasterMain() blindly turns on LoadedSSL,
> irrespective of the outcome of secure_initialize().

This call is invoked with isServerStart set to true so any error in
secure_initialize should error out with ereport FATAL (in be_tls_init()).  That
could be explained in a comment though, which is currently isn't.

Did you manage to get LoadedSSL set to true without SSL having been properly
initialized?

--
Daniel Gustafsson        https://vmware.com/




В списке pgsql-hackers по дате отправления:

Предыдущее
От: Gurjeet Singh
Дата:
Сообщение: Patch: Don't set LoadedSSL unless secure_initialize succeeds
Следующее
От: Przemysław Sztoch
Дата:
Сообщение: Re: Add --{no-,}bypassrls flags to createuser