agora inbox for pgsql-committers@postgresql.orghelp / color / mirror / Atom feed
pgsql: Warn on password auth with MD5-encrypted passwords 2+ messages / 1 participants [nested] [flat]
* pgsql: Warn on password auth with MD5-encrypted passwords @ 2026-07-01 11:58 Fujii Masao <fujii@postgresql.org> 0 siblings, 0 replies; 2+ messages in thread From: Fujii Masao @ 2026-07-01 11:58 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Warn on password auth with MD5-encrypted passwords Commit bc60ee860 added a connection warning after successful MD5 authentication, but only for the md5 authentication method. A role with an MD5-encrypted password can also authenticate via the password method, which left that path without the same deprecation warning. Emit the MD5 deprecation connection warning after successful password authentication as well, when the stored password is MD5-encrypted. Backpatch to v19, where the MD5 connection warning was introduced. Author: Fujii Masao <masao.fujii@gmail.com> Reviewed-by: Chao Li <li.evan.chao@gmail.com> Reviewed-by: Japin Li <japinli@hotmail.com> Discussion: https://postgr.es/m/CAHGQGwGkWfn5rtHzvdRbVk+PCefQU3gun3hc7QnaMXHFa5Bu3w@mail.gmail.com Backpatch-through: 19 Branch ------ master Details ------- https://git.postgresql.org/pg/commitdiff/f6fdc2a4a737b62323b786aea59ab7a38cd7f835 Modified Files -------------- doc/src/sgml/config.sgml | 3 ++- src/backend/libpq/auth.c | 33 +++++++++++++++++++++++++++++++ src/backend/libpq/crypt.c | 22 --------------------- src/test/authentication/t/001_password.pl | 10 ++++++++++ 4 files changed, 45 insertions(+), 23 deletions(-) ^ permalink raw reply [nested|flat] 2+ messages in thread
* pgsql: Warn on password auth with MD5-encrypted passwords @ 2026-07-01 11:58 Fujii Masao <fujii@postgresql.org> 0 siblings, 0 replies; 2+ messages in thread From: Fujii Masao @ 2026-07-01 11:58 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Warn on password auth with MD5-encrypted passwords Commit bc60ee860 added a connection warning after successful MD5 authentication, but only for the md5 authentication method. A role with an MD5-encrypted password can also authenticate via the password method, which left that path without the same deprecation warning. Emit the MD5 deprecation connection warning after successful password authentication as well, when the stored password is MD5-encrypted. Backpatch to v19, where the MD5 connection warning was introduced. Author: Fujii Masao <masao.fujii@gmail.com> Reviewed-by: Chao Li <li.evan.chao@gmail.com> Reviewed-by: Japin Li <japinli@hotmail.com> Discussion: https://postgr.es/m/CAHGQGwGkWfn5rtHzvdRbVk+PCefQU3gun3hc7QnaMXHFa5Bu3w@mail.gmail.com Backpatch-through: 19 Branch ------ REL_19_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/e57a865dc7003f75d3a2d080603c95dd469b89a5 Modified Files -------------- doc/src/sgml/config.sgml | 3 ++- src/backend/libpq/auth.c | 33 +++++++++++++++++++++++++++++++ src/backend/libpq/crypt.c | 22 --------------------- src/test/authentication/t/001_password.pl | 10 ++++++++++ 4 files changed, 45 insertions(+), 23 deletions(-) ^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2026-07-01 11:58 UTC | newest] Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2026-07-01 11:58 pgsql: Warn on password auth with MD5-encrypted passwords Fujii Masao <fujii@postgresql.org> 2026-07-01 11:58 pgsql: Warn on password auth with MD5-encrypted passwords Fujii Masao <fujii@postgresql.org>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox