Date: Wed, 26 May 2021 11:14:59 +0900
From: Michael Paquier <michael@paquier.xyz>
To: RekGRpth <rekgrpth@gmail.com>
Cc: Jeff Janes <jeff.janes@gmail.com>,
	pgsql-bugs <pgsql-bugs@lists.postgresql.org>
Subject: Re: BUG #17032: wrong password cause double connect and double error
Message-ID: <YK2vI8hsMu6razsv@paquier.xyz>
References: <17032-7ad69968e744de35@postgresql.org>
 <CAMkU=1y7va3iYKYtjs50FvfWE-frPjKzwQUm0-xf4jazf42tsw@mail.gmail.com>
 <CAPgh2mLRKcKyS6s6bE+heMjgD8i2AOpN0W5=Ur4VSgN2i=zQCw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="j29M0o5mlV2zeoTn"
Content-Disposition: inline
In-Reply-To: 
 <CAPgh2mLRKcKyS6s6bE+heMjgD8i2AOpN0W5=Ur4VSgN2i=zQCw@mail.gmail.com>
Archived-At: 
 <https://www.postgresql.org/message-id/YK2vI8hsMu6razsv%40paquier.xyz>
Precedence: bulk


--j29M0o5mlV2zeoTn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Tue, May 25, 2021 at 07:10:11PM +0500, RekGRpth wrote:
> Ok, thanks. But, Why try to re-establish a known unsuccessful
> connection? (because wrong password)

Because that's the way the default behavior of sslmode works, and
because it is simpler to work this way in libpq by making all failures
reported by the backend work the same way on the client side:
https://www.postgresql.org/docs/devel/libpq-connect.html#LIBPQ-CONNECT-SSLMODE

(I agree that this is an unsafe default choice, and we've discussed
about changing to a saner default.)
--
Michael

--j29M0o5mlV2zeoTn
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAmCtryMACgkQnvQgOdby
QH0C6A//ZFuJCF97Ma/Qfh6NfOfxDtl8AlEv+Iuyyp4rPwbWymOu9/nsPWy8ibz4
fbXvaLz/Wx0EDZGplTO46eJdx4ccf6SgtRPdwroEEqXQI5dSCf+V/bOH8beLEQhr
i5riO+7N5mCnX5KE/XYVq0LP+lD1XIs9BEFxz5QsfoXUf9TuV4ElQmKS9ERtNN6w
y6BapMs21TN+4iYWdVphGWVmowTM0P7y4NGFjTWel9YGY/1veZ9BxCoTs2V2pnpQ
1xAmfMrElLYzENghPh+QEGKhVV4soIircG0gHgyqPNJpaip0OfqAZnBHmbJ6F8p8
tMRNgoERCkZX6w/YSY47tjBE9KETlJ8CDCGX5nVu5OmH7EI1z0HtbeZpWK8iXTVX
UyklYtCl6vpRnBhRfzlHldWTaaXEbQGJ8pB9JCcmpWFzXSRzpkhbcWWfoE636Zka
CqfECKAYE6wtE24yo6bFTWSGgcQsF+R0tMEGcjhm9cwHUHCx7rzRkXUg4cEEAn+k
NJBA7CUcPkNhxQ4JwLYA0fONLvK6pcZxcExKYZSbhixZggaT+eZeVxxNUoY7vATS
pA42tCIxCW0jY2bcOHqzqjfceMdziSwAQDwbElemmIeCphxjFqsMGv+AEuPm72b6
6Y+guR9+Hy67RafkUkU1KWz6/TvJxfXKvaug7j+ditW/wktz3FQ=
=Tvkn
-----END PGP SIGNATURE-----

--j29M0o5mlV2zeoTn--