postgresql

History

Magnus Hagander 87091cb1f1 Create typedef pgsocket for storing socket descriptors. This silences some warnings on Win64. Not using the proper SOCKET datatype was actually wrong on Win32 as well, but didn't cause any warnings there. Also create define PGINVALID_SOCKET to indicate an invalid/non-existing socket, instead of using a hardcoded -1 value.		2010-01-10 14:16:08 +00:00
..
Makefile	Refactor backend makefiles to remove lots of duplicate code	2008-02-19 10:30:09 +00:00
README.SSL	Remove large parts of the old SSL readme, that consisted of a couple	2008-10-24 11:48:29 +00:00
auth.c	Create typedef pgsocket for storing socket descriptors.	2010-01-10 14:16:08 +00:00
be-fsstubs.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
be-secure.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
crypt.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
hba.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
ip.c	Create typedef pgsocket for storing socket descriptors.	2010-01-10 14:16:08 +00:00
md5.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
pg_hba.conf.sample	Support "samehost" and "samenet" specifications in pg_hba.conf,	2009-10-01 01:58:58 +00:00
pg_ident.conf.sample	Improve comments in pg_ident.conf.sample.	2009-05-16 20:43:46 +00:00
pqcomm.c	Create typedef pgsocket for storing socket descriptors.	2010-01-10 14:16:08 +00:00
pqformat.c	Remove all the special-case code for INT64_IS_BUSTED, per decision that	2010-01-07 04:53:35 +00:00
pqsignal.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00

README.SSL

$PostgreSQL: pgsql/src/backend/libpq/README.SSL,v 1.7 2008/10/24 11:48:29 mha Exp $

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup
     




>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------