postgresql

History

Bruce Momjian 3187ef7c46 Revert "Add key management system" (`978f869b99`) & later commits The patch needs test cases, reorganization, and cfbot testing. Technically reverts commits 5c31afc49d..e35b2bad1a (exclusive/inclusive) and 08db7c63f3..ccbe34139b. Reported-by: Tom Lane, Michael Paquier Discussion: https://postgr.es/m/E1ktAAG-0002V2-VB@gemulon.postgresql.org		2020-12-27 21:37:42 -05:00
..
Makefile	Split all OBJS style lines in makefiles into one-line-per-entry style.	2019-11-05 14:41:07 -08:00
README.SSL	Move EDH support to common files	2018-01-23 07:11:38 -05:00
auth-scram.c	Move SHA2 routines to a new generic API layer for crypto hashes	2020-12-02 10:37:20 +09:00
auth.c	Convert elog(LOG) calls to ereport() where appropriate	2020-12-04 14:25:23 +01:00
be-fsstubs.c	Update copyrights for 2020	2020-01-01 12:21:45 -05:00
be-gssapi-common.c	Update copyrights for 2020	2020-01-01 12:21:45 -05:00
be-secure-common.c	Revert "Add key management system" (`978f869b99`) & later commits	2020-12-27 21:37:42 -05:00
be-secure-gssapi.c	Replace calls of htonl()/ntohl() with pg_bswap.h for GSSAPI encryption	2020-10-15 17:03:56 +09:00
be-secure-openssl.c	Message style improvements	2020-11-07 19:33:43 -03:00
be-secure.c	Update copyrights for 2020	2020-01-01 12:21:45 -05:00
crypt.c	Initial pgindent and pgperltidy run for v13.	2020-05-14 13:06:50 -04:00
hba.c	Convert elog(LOG) calls to ereport() where appropriate	2020-12-04 14:25:23 +01:00
ifaddr.c	Update copyrights for 2020	2020-01-01 12:21:45 -05:00
pg_hba.conf.sample	gss: add missing references to hostgssenc and hostnogssenc	2020-05-25 20:19:28 -04:00
pg_ident.conf.sample	Reformat the comments in pg_hba.conf and pg_ident.conf	2010-01-26 06:58:39 +00:00
pqcomm.c	Convert elog(LOG) calls to ereport() where appropriate	2020-12-04 14:25:23 +01:00
pqformat.c	Update copyrights for 2020	2020-01-01 12:21:45 -05:00
pqmq.c	code: replace 'master' with 'leader' where appropriate.	2020-07-08 12:58:32 -07:00
pqsignal.c	Update copyrights for 2020	2020-01-01 12:21:45 -05:00

README.SSL

src/backend/libpq/README.SSL

SSL
===

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup





>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown

---------------------------------------------------------------------------

Ephemeral DH
============

Since the server static private key ($DataDir/server.key) will
normally be stored unencrypted so that the database backend can
restart automatically, it is important that we select an algorithm
that continues to provide confidentiality even if the attacker has the
server's private key.  Ephemeral DH (EDH) keys provide this and more
(Perfect Forward Secrecy aka PFS).

N.B., the static private key should still be protected to the largest
extent possible, to minimize the risk of impersonations.

Another benefit of EDH is that it allows the backend and clients to
use DSA keys.  DSA keys can only provide digital signatures, not
encryption, and are often acceptable in jurisdictions where RSA keys
are unacceptable.

The downside to EDH is that it makes it impossible to use ssldump(1)
if there's a problem establishing an SSL session.  In this case you'll
need to temporarily disable EDH (see initialize_dh()).