From: Gunnar \"Nick\" Bluth <gunnar.bluth@pro-open.de>
To: Michael Paquier <michael@paquier.xyz>
To: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: Jacob Champion <jchampion@timescale.com>
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17760: SCRAM authentication fails with "modern" (rsassaPss signature) server certificate
Date: Mon, 13 Feb 2023 13:54:46 +0100
Message-ID: <29c8e8cb-d476-727e-c257-3f9cfa6ed527@pro-open.de> (raw)
In-Reply-To: <Y+mZWf6NCCHiTjzM@paquier.xyz>
References: <17760-b6c61e752ec07060@postgresql.org>
<b27b9b96-ea65-2ed1-d632-c5ab55713b06@iki.fi>
<584842ed-e476-6bac-bb36-2aec204e9eef@iki.fi>
<Y+St0GKY9FsTTJ1U@paquier.xyz>
<07e810b5-ea15-87ac-1745-e765e426062e@iki.fi>
<CAAWbhmh5LiE16nLZcjBjTACzSp4vCJsuiQLsHmzFKdMEncHKdg@mail.gmail.com>
<Y+V3p2k6yBUWm9N5@paquier.xyz>
<CAAWbhmgjYym7AsH1fqOx+bNqctPpSW1DzyLv_0VhBa_ng+NVyQ@mail.gmail.com>
<b6e6d13f-b912-4c6e-c12a-2c7934bdc830@iki.fi>
<Y+mZWf6NCCHiTjzM@paquier.xyz>
Am 13.02.23 um 02:58 schrieb Michael Paquier:
[...]
>> Agreed, if we have an easy solution for RSA-PSS, that's good enough
>> for now.
>
> Indeed.
>
> With all that in mind, I am finishing with the attached with the
> tests, the meson tweaks and the MSVC tweaks. I have tested it on
> HEAD, with OpenSSL down to 1.0.1 which is the minimum version of this
> branch. Making sure that this mostly works with 1.0.0 and 0.9.8 on
> older branches would not be an issue here.
FWIW:
I only understand a fraction of the underlying crypto, but the patch LGTM!
Much appreciated, thanks for the effort (and sorry for causing it ;-)!
--
Gunnar "Nick" Bluth
Eimermacherweg 106
D-48159 Münster
Mobil +49 172 8853339
Email: gunnar.bluth@pro-open.de
__________________________________________________________________________
"Ceterum censeo SystemD esse delendam" - Cato
Attachments:
[application/pgp-signature] OpenPGP_signature (494B, ../29c8e8cb-d476-727e-c257-3f9cfa6ed527@pro-open.de/2-OpenPGP_signature)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: gunnar.bluth@pro-open.de, michael@paquier.xyz, hlinnaka@iki.fi, jchampion@timescale.com, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17760: SCRAM authentication fails with "modern" (rsassaPss signature) server certificate
In-Reply-To: <29c8e8cb-d476-727e-c257-3f9cfa6ed527@pro-open.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox