postgresql/src/backend/libpq
Tom Lane c1c888a9de Code review for MD5 authorization patch. Clean up some breakage
(salts were always zero!?), add much missing documentation.
2001-09-21 20:31:49 +00:00
..
Makefile Use MD5 for wire protocol encryption for >= 7.2 client/server. 2001-08-15 18:42:16 +00:00
README.SSL Add README.SSL 1999-09-27 03:16:09 +00:00
auth.c Code review for MD5 authorization patch. Clean up some breakage 2001-09-21 20:31:49 +00:00
be-fsstubs.c Allow a non-superuser database owner to vacuum all tables in his 2001-06-13 21:44:41 +00:00
crypt.c Code review for MD5 authorization patch. Clean up some breakage 2001-09-21 20:31:49 +00:00
hba.c Code review for MD5 authorization patch. Clean up some breakage 2001-09-21 20:31:49 +00:00
md5.c Code review for MD5 authorization patch. Clean up some breakage 2001-09-21 20:31:49 +00:00
password.c A little more code reorg for MD5/crypt. 2001-08-17 15:44:17 +00:00
pg_hba.conf.sample PAM authentication: 2001-09-06 03:23:38 +00:00
pg_ident.conf.sample Add mention of SIGHUP for pg_ident.conf. 2001-08-01 00:52:19 +00:00
pqcomm.c Fix thinko (revealed by gcc warning). 2001-08-07 15:55:16 +00:00
pqformat.c Remove error report from pq_endmessage when pq_putmessage fails. The 2001-04-16 01:46:57 +00:00
pqpacket.c pgindent run. Make it all clean. 2001-03-22 04:01:46 +00:00
pqsignal.c Add an overall timeout on the client authentication cycle, so that 2001-09-21 17:06:12 +00:00
util.c Change Copyright from PostgreSQL, Inc to PostgreSQL Global Development Group. 2001-01-24 19:43:33 +00:00

README.SSL

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup
     




>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown