From: Tom Lane <tgl@sss.pgh.pa.us>
To: Jacob Champion <pchampion@vmware.com>
Cc: michael@paquier.xyz <michael@paquier.xyz>
Cc: pgsql-committers@lists.postgresql.org <pgsql-committers@lists.postgresql.org>
Subject: Re: pgsql: Add some information about authenticated identity via log_connec
Date: Wed, 07 Apr 2021 12:51:57 -0400
Message-ID: <1597946.1617814317@sss.pgh.pa.us> (raw)
In-Reply-To: <fa8dbbb58c20b1d1adf0082769f80d5466eaf485.camel@vmware.com>
References: <E1lTwp4-0002l4-L9@gemulon.postgresql.org>
<YG05nCI8x8B+Ad3G@paquier.xyz>
<1544704.1617805663@sss.pgh.pa.us>
<fa8dbbb58c20b1d1adf0082769f80d5466eaf485.camel@vmware.com>
Jacob Champion <pchampion@vmware.com> writes:
> On Wed, 2021-04-07 at 10:27 -0400, Tom Lane wrote:
>> prairiedog is also not happy, apparently for a different reason.
> That one's failing because older OpenSSL doesn't support channel
> binding, and the new test I wrote forgot to check to make sure channel
> binding was supported... sorry.
> But the test doesn't truly *need* channel binding anyway; it just needs
> to check the interaction between SCRAM and verify-full, to ensure that
> the correct authn_id is set. Patch attached, tested locally with
> OpenSSL 1.0.1 and 1.1.1.
Sounds reasonable, pushed. (I didn't actually verify it on prairiedog,
because that would have taken a couple hours :-(. We can revisit if
that animal fails to go green.)
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-committers@postgresql.org
Cc: tgl@sss.pgh.pa.us, pchampion@vmware.com, michael@paquier.xyz, pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: Add some information about authenticated identity via log_connec
In-Reply-To: <1597946.1617814317@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox