rdelaage/postgresql
1
0
Fork 0
mirror of https://git.postgresql.org/git/postgresql.git synced 2024-09-12 17:48:01 +02:00
Code Issues Packages Projects Releases Wiki Activity
f906e0786e
postgresql/src/backend/libpq
History
Tom Lane 73b3bd5574 Document the existence of the socket lock file under unix_socket_directory, 
which is perhaps not a terribly good spot for it but there doesn't seem to be
a better place.  Also add a source-code comment pointing out a couple reasons
for having a separate lock file.  Per suggestion from Greg Smith.
2010-08-26 22:00:19 +00:00
..
auth.c pgindent run for 9.0, second run 2010-07-06 19:19:02 +00:00
be-fsstubs.c
be-secure.c pgindent run for 9.0, second run 2010-07-06 19:19:02 +00:00
crypt.c
hba.c Standardize get_whatever_oid functions for object types with 2010-08-05 14:45:09 +00:00
ip.c
Makefile
md5.c
pg_hba.conf.sample
pg_ident.conf.sample
pqcomm.c Document the existence of the socket lock file under unix_socket_directory, 2010-08-26 22:00:19 +00:00
pqformat.c
pqsignal.c
README.SSL

README.SSL 

$PostgreSQL: pgsql/src/backend/libpq/README.SSL,v 1.7 2008/10/24 11:48:29 mha Exp $

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup
     




>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------