rdelaage
/
postgresql
mirror of https://git.postgresql.org/git/postgresql.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
postgresql/src/backend/libpq
History
Noah Misch c50b7c09d8 Add large object functions catering to SQL callers. 
With these, one need no longer manipulate large object descriptors and
extract numeric constants from header files in order to read and write
large object contents from SQL.

Pavel Stehule, reviewed by Rushabh Lathia.
 		2013-10-27 22:56:54 -04:00
..
Makefile Remove cvs keywords from all files. 2010-09-20 22:08:53 +02:00
README.SSL Remove useless whitespace at end of lines 2010-11-23 22:34:55 +02:00
auth.c Get rid of use of asprintf() in favor of a more portable implementation. 2013-10-22 18:42:13 -04:00
be-fsstubs.c Add large object functions catering to SQL callers. 2013-10-27 22:56:54 -04:00
be-secure.c Silence compiler warning when SSL not in use 2013-10-17 11:28:50 -03:00
crypt.c Update copyrights for 2013 2013-01-01 17:15:01 -05:00
hba.c Fix memory leak when an empty ident file is reloaded. 2013-10-24 14:03:26 +03:00
ip.c Update copyrights for 2013 2013-01-01 17:15:01 -05:00
md5.c Update copyrights for 2013 2013-01-01 17:15:01 -05:00
pg_hba.conf.sample initdb: Add options --auth-local and --auth-host 2012-02-01 21:18:55 +02:00
pg_ident.conf.sample Reformat the comments in pg_hba.conf and pg_ident.conf 2010-01-26 06:58:39 +00:00
pqcomm.c pgindent run for release 9.3 2013-05-29 16:58:43 -04:00
pqformat.c Update copyrights for 2013 2013-01-01 17:15:01 -05:00
pqsignal.c Move pqsignal() to libpgport. 2013-03-17 12:06:42 -04:00

README.SSL 

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------