postgresql

History

Bruce Momjian f75e16d459 Fix for PAM error message display: > and that the right fix is to make each of the subsequent calls be in > this same pattern, not to try to emulate their nonsensical style. Dominic J. Eidson		2002-02-25 20:07:02 +00:00
..
Makefile	Remove md5.c check, add CVS log stamp. Update comments.	2001-11-13 22:06:58 +00:00
README.SSL	Add README.SSL	1999-09-27 03:16:09 +00:00
auth.c	Fix for PAM error message display:	2002-02-25 20:07:02 +00:00
be-fsstubs.c	Allow a non-superuser database owner to vacuum all tables in his	2001-06-13 21:44:41 +00:00
crypt.c	New pgindent run with fixes suggested by Tom. Patch manually reviewed,	2001-11-05 17:46:40 +00:00
hba.c	Fix use of 'char' to hold result of getc, per bug report forwarded by	2002-01-09 19:13:41 +00:00
md5.c	Improve comments about duplicate files.	2001-11-18 23:02:19 +00:00
password.c	pgindent run on all C files. Java run to follow. initdb/regression	2001-10-25 05:50:21 +00:00
pg_hba.conf.sample	Place PAM before REJECT in sample file.	2001-12-24 04:44:03 +00:00
pg_ident.conf.sample	Add mention of SIGHUP for pg_ident.conf.	2001-08-01 00:52:19 +00:00
pqcomm.c	Change appendStringInfoChar to appendStringInfoCharMacro in a couple of	2001-12-04 20:57:22 +00:00
pqformat.c	Change appendStringInfoChar to appendStringInfoCharMacro in a couple of	2001-12-04 20:57:22 +00:00
pqsignal.c	New pgindent run with fixes suggested by Tom. Patch manually reviewed,	2001-11-05 17:46:40 +00:00
util.c	pgindent run on all C files. Java run to follow. initdb/regression	2001-10-25 05:50:21 +00:00

README.SSL

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup
     




>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown