postgresql

History

Tom Lane da5aeccf64 Move pqsignal() to libpgport. We had two copies of this function in the backend and libpq, which was already pretty bogus, but it turns out that we need it in some other programs that don't use libpq (such as pg_test_fsync). So put it where it probably should have been all along. The signal-mask-initialization support in src/backend/libpq/pqsignal.c stays where it is, though, since we only need that in the backend.		2013-03-17 12:06:42 -04:00
..
Makefile	Remove cvs keywords from all files.	2010-09-20 22:08:53 +02:00
README.SSL	Remove useless whitespace at end of lines	2010-11-23 22:34:55 +02:00
auth.c	Report pg_hba line number and contents when users fail to log in	2013-03-10 15:54:37 +01:00
be-fsstubs.c	Update copyrights for 2013	2013-01-01 17:15:01 -05:00
be-secure.c	Update copyrights for 2013	2013-01-01 17:15:01 -05:00
crypt.c	Update copyrights for 2013	2013-01-01 17:15:01 -05:00
hba.c	Report pg_hba line number and contents when users fail to log in	2013-03-10 15:54:37 +01:00
ip.c	Update copyrights for 2013	2013-01-01 17:15:01 -05:00
md5.c	Update copyrights for 2013	2013-01-01 17:15:01 -05:00
pg_hba.conf.sample	initdb: Add options --auth-local and --auth-host	2012-02-01 21:18:55 +02:00
pg_ident.conf.sample	Reformat the comments in pg_hba.conf and pg_ident.conf	2010-01-26 06:58:39 +00:00
pqcomm.c	Update copyrights for 2013	2013-01-01 17:15:01 -05:00
pqformat.c	Update copyrights for 2013	2013-01-01 17:15:01 -05:00
pqsignal.c	Move pqsignal() to libpgport.	2013-03-17 12:06:42 -04:00

README.SSL

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------