postgresql

History

Tom Lane 4c8d2f7f7b Clean up callers of AllocateFile and BasicOpenFile to ensure that a reasonable error message (including the kernel errno message) is reported on any file open failure.		2000-08-27 21:50:18 +00:00
..
Makefile	Make the location of the Kerberos server key file run time configurable	2000-08-25 10:00:35 +00:00
README.SSL	Add README.SSL	1999-09-27 03:16:09 +00:00
auth.c	Make the location of the Kerberos server key file run time configurable	2000-08-25 10:00:35 +00:00
be-fsstubs.c	Revise aggregate functions per earlier discussions in pghackers.	2000-07-17 03:05:41 +00:00
crypt.c	Clean up callers of AllocateFile and BasicOpenFile to ensure that	2000-08-27 21:50:18 +00:00
hba.c	Clean up callers of AllocateFile and BasicOpenFile to ensure that	2000-08-27 21:50:18 +00:00
password.c	Clean up callers of AllocateFile and BasicOpenFile to ensure that	2000-08-27 21:50:18 +00:00
pg_hba.conf.sample	Update pg_hba.conf with more examples	2000-05-30 17:39:56 +00:00
pg_ident.conf.sample	Move YACC and YFLAGS into the template files	1997-04-04 11:23:15 +00:00
pqcomm.c	Remove long-dead support for invoking queries from dynamically loaded	2000-07-08 03:04:41 +00:00
pqformat.c	Remove a bunch of unused configure tests, in particular cases where	2000-07-12 22:59:15 +00:00
pqpacket.c	Ye-old pgindent run. Same 4-space tabs.	2000-04-12 17:17:23 +00:00
pqsignal.c	Add SIGFPE to list of signals never to block. #ifdef all signals in	2000-06-29 02:17:42 +00:00
util.c	Remove long-dead support for invoking queries from dynamically loaded	2000-07-08 03:04:41 +00:00

README.SSL

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup
     




>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown