public inbox for [email protected]  
help / color / mirror / Atom feed
From: Nathan Bossart <[email protected]>
To: [email protected]
Subject: pgsql: Warn upon successful MD5 password authentication.
Date: Mon, 23 Feb 2026 17:22:48 +0000
Message-ID: <[email protected]> (raw)

Warn upon successful MD5 password authentication.

This uses the "connection warning" infrastructure introduced by
commit 1d92e0c2cc to emit a WARNING when an MD5 password is used to
authenticate.  MD5 password support was marked as deprecated in
v18 and will be removed in a future release of Postgres.  These
warnings are on by default but can be turned off via the existing
md5_password_warnings parameter.

Reviewed-by: Andreas Karlsson <[email protected]>
Reviewed-by: Xiangyu Liang <[email protected]>
Discussion: https://postgr.es/m/aYzeAYEbodkkg5e-%40nathan

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/bc60ee86066520ee0f86abd3d47bb8ab9757842f

Modified Files
--------------
doc/src/sgml/config.sgml                  |  3 ++-
src/backend/libpq/crypt.c                 | 17 +++++++++++++++++
src/test/authentication/t/001_password.pl |  2 ++
3 files changed, 21 insertions(+), 1 deletion(-)



reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: pgsql: Warn upon successful MD5 password authentication.
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox