Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pRYM8-00049L-JF for pgsql-bugs@arkaria.postgresql.org; Mon, 13 Feb 2023 12:54:53 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1pRYM6-0005Sx-Mc for pgsql-bugs@arkaria.postgresql.org; Mon, 13 Feb 2023 12:54:50 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pRYM6-0005Sn-3B for pgsql-bugs@lists.postgresql.org; Mon, 13 Feb 2023 12:54:50 +0000 Received: from www.pro-open.de ([46.4.51.10]) by magus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1pRYM4-0001SE-PB for pgsql-bugs@lists.postgresql.org; Mon, 13 Feb 2023 12:54:49 +0000 Received: from localhost (localhost.localdomain [127.0.0.1]) by www.pro-open.de (Postfix) with ESMTP id 63DF35B45EC5; Mon, 13 Feb 2023 13:54:47 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at pro-open.de Received: from www.pro-open.de ([127.0.0.1]) by localhost (www.pro-open.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TYVK3PETeRPM; Mon, 13 Feb 2023 13:54:46 +0100 (CET) Received: from [192.168.0.42] (p4fd27e52.dip0.t-ipconnect.de [79.210.126.82]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by www.pro-open.de (Postfix) with ESMTPSA id B28E95B45EC4; Mon, 13 Feb 2023 13:54:46 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=pro-open.de; s=dkim; t=1676292886; bh=eVYKckL4RLzIMMOQ/37YmowDEUzyqWH2fpeW661hf3M=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From; b=juD8rM15dgyqBXgoKz/VC1YZrUhFhTWJDQFdyZtgOoIDR1p/lI5Po3xzh1YYOimSd Zqb0ceZwP5aQ36Xq8bxi6eaa5M3N2W+n+MuEDXOGzCPJHwHypwZnuCJt2aQCJuxubO 09fuvOy8zzU8MBVe8mk8DznpITRtr5IJiKXJ5Y0Mq5wxvgQuFm0CR6f+DIaghCbATM /dV3UBNY/FhCUYOvYPTHVa+kZp3C9tj2FhadX0pS3gKgXkqw8NQkPxrx5myK+v/c33 chjF3CBUWuCKdn8AhJfNWGzVVVJQyp1QTqGWzFYk+sTr9RoBc20+PzZgWD1WwQJBtI o1C/5upNxfAeg== Message-ID: <29c8e8cb-d476-727e-c257-3f9cfa6ed527@pro-open.de> Date: Mon, 13 Feb 2023 13:54:46 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.7.1 Subject: Re: BUG #17760: SCRAM authentication fails with "modern" (rsassaPss signature) server certificate Content-Language: de-DE To: Michael Paquier , Heikki Linnakangas Cc: Jacob Champion , pgsql-bugs@lists.postgresql.org References: <17760-b6c61e752ec07060@postgresql.org> <584842ed-e476-6bac-bb36-2aec204e9eef@iki.fi> <07e810b5-ea15-87ac-1745-e765e426062e@iki.fi> From: "Gunnar \"Nick\" Bluth" In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------T0YYMh3aQe08pWPMcQC0k1q6" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------T0YYMh3aQe08pWPMcQC0k1q6 Content-Type: multipart/mixed; boundary="------------HU0y4kdKt9kHN6u80ZCunFKR"; protected-headers="v1" From: "Gunnar \"Nick\" Bluth" To: Michael Paquier , Heikki Linnakangas Cc: Jacob Champion , pgsql-bugs@lists.postgresql.org Message-ID: <29c8e8cb-d476-727e-c257-3f9cfa6ed527@pro-open.de> Subject: Re: BUG #17760: SCRAM authentication fails with "modern" (rsassaPss signature) server certificate References: <17760-b6c61e752ec07060@postgresql.org> <584842ed-e476-6bac-bb36-2aec204e9eef@iki.fi> <07e810b5-ea15-87ac-1745-e765e426062e@iki.fi> In-Reply-To: --------------HU0y4kdKt9kHN6u80ZCunFKR Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 QW0gMTMuMDIuMjMgdW0gMDI6NTggc2NocmllYiBNaWNoYWVsIFBhcXVpZXI6DQpbLi4uXQ0K DQo+PiBBZ3JlZWQsIGlmIHdlIGhhdmUgYW4gZWFzeSBzb2x1dGlvbiBmb3IgUlNBLVBTUywg dGhhdCdzIGdvb2QgZW5vdWdoDQo+PiBmb3Igbm93Lg0KPiANCj4gSW5kZWVkLg0KPiANCj4g V2l0aCBhbGwgdGhhdCBpbiBtaW5kLCBJIGFtIGZpbmlzaGluZyB3aXRoIHRoZSBhdHRhY2hl ZCB3aXRoIHRoZQ0KPiB0ZXN0cywgdGhlIG1lc29uIHR3ZWFrcyBhbmQgdGhlIE1TVkMgdHdl YWtzLiAgSSBoYXZlIHRlc3RlZCBpdCBvbg0KPiBIRUFELCB3aXRoIE9wZW5TU0wgZG93biB0 byAxLjAuMSB3aGljaCBpcyB0aGUgbWluaW11bSB2ZXJzaW9uIG9mIHRoaXMNCj4gYnJhbmNo LiAgTWFraW5nIHN1cmUgdGhhdCB0aGlzIG1vc3RseSB3b3JrcyB3aXRoIDEuMC4wIGFuZCAw LjkuOCBvbg0KPiBvbGRlciBicmFuY2hlcyB3b3VsZCBub3QgYmUgYW4gaXNzdWUgaGVyZS4N Cg0KRldJVzoNCkkgb25seSB1bmRlcnN0YW5kIGEgZnJhY3Rpb24gb2YgdGhlIHVuZGVybHlp bmcgY3J5cHRvLCBidXQgdGhlIHBhdGNoIExHVE0hDQoNCk11Y2ggYXBwcmVjaWF0ZWQsIHRo YW5rcyBmb3IgdGhlIGVmZm9ydCAoYW5kIHNvcnJ5IGZvciBjYXVzaW5nIGl0IDstKSENCi0t IA0KR3VubmFyICJOaWNrIiBCbHV0aA0KDQpFaW1lcm1hY2hlcndlZyAxMDYNCkQtNDgxNTkg TcO8bnN0ZXINCg0KTW9iaWwgKzQ5IDE3MiA4ODUzMzM5DQpFbWFpbDogZ3VubmFyLmJsdXRo QHByby1vcGVuLmRlDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KIkNldGVydW0gY2Vuc2VvIFN5 c3RlbUQgZXNzZSBkZWxlbmRhbSIgLSBDYXRvDQoNCg== --------------HU0y4kdKt9kHN6u80ZCunFKR-- --------------T0YYMh3aQe08pWPMcQC0k1q6 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEEalk3A/SRAkpwy/bgEBCuazKJM4wFAmPqMxYFAwAAAAAACgkQEBCuazKJM4ys ogf/cDMJrt9JNEYsy15fnfRazKRTBweCkRf1TpAf7gtjBKG6UQ5W5zlbm+PiPt8SjBLme2k3J1ja zIPZ7EQqIXfM1U6F5+oohrL3UuGBjUD+6O2MnOtQ8JtcV+sfzyvDO4WjbpYqe81DOtK2MKYkLQQI s/janbBfmdcmvdVBBXhaM0mynMBOh10Y8y+ALtF7V2F4Dw51HHLnuzhSFUpjEJYi91mCDDycNvNI D9SmJmFQ4ZZCVj44l2BbmThZECUsZX2i4imavlDqj4NYYYM2z4gDmfNcn0qjHH1xx2E16tGb2aO5 FvP3ZM1f6l4MaiOoJTtthe7KhKan0/XTz6RRaVAtQQ== =rhr6 -----END PGP SIGNATURE----- --------------T0YYMh3aQe08pWPMcQC0k1q6--