Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1ZC6pl-0005cq-MB for pgsql-hackers@arkaria.postgresql.org; Mon, 06 Jul 2015 13:53:21 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84) (envelope-from ) id 1ZC6pk-0005Pw-Ea for pgsql-hackers@arkaria.postgresql.org; Mon, 06 Jul 2015 13:53:20 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84) (envelope-from ) id 1ZC6pb-0005GK-Ka for pgsql-hackers@postgresql.org; Mon, 06 Jul 2015 13:53:11 +0000 Received: from tamriel.snowman.net ([2001:4830:167b::11]) by magus.postgresql.org with esmtp (Exim 4.84) (envelope-from ) id 1ZC6pY-0008RI-D8 for pgsql-hackers@postgresql.org; Mon, 06 Jul 2015 13:53:10 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id D548E5F7A4; Mon, 6 Jul 2015 09:53:07 -0400 (EDT) Date: Mon, 6 Jul 2015 09:53:07 -0400 From: Stephen Frost To: Robbie Harwood Cc: pgsql-hackers@postgresql.org Subject: Re: [PATCH v1] GSSAPI encryption support Message-ID: <20150706135307.GN12131@tamriel.snowman.net> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="xhJxprRH8Q4al5cy" Content-Disposition: inline In-Reply-To: X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.13.0-46-generic (x86_64) X-Uptime: 09:51:28 up 108 days, 19:40, 11 users, load average: 0.04, 0.03, 0.05 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -2.6 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org --xhJxprRH8Q4al5cy Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Robbie, * Robbie Harwood (rharwood@redhat.com) wrote: > As previously discussed on this list, I have coded up GSSAPI encryption > support. If it is easier for anyone, this code is also available for > viewing on my github: > https://github.com/postgres/postgres/compare/master...frozencemetery:feat= ure/gssencrypt >=20 > Fallback support is present in both directions for talking to old client > and old servers; GSSAPI encryption is by default auto-upgraded to where > available (for compatibility), but both client and server contain > settings for requiring it. >=20 > There are 8 commits in this series; I have tried to err on the side of > creating too much separation rather than too little. A patch for each > is attached. This is v1 of the series. Excellent, thanks! I've got other things to tend to at the moment, but this is definitely something I'm interested in and will work on (likely in August). If we could get a reviewer or two to take a look and take the patch out for a test-drive, at least, that would be a huge help. Thanks again! Stephen --xhJxprRH8Q4al5cy Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVmohDAAoJEO1sijiDR2RVvDYP+weN4w7Vzc1E5IXRJNBsu5f+ CHORr5u+B3eknJO4QDSU6ykSQ9Cgx+YrKURyL3xXMT5UWnkGHc8gVDxPjynYpXjD MpakF7SbGEu6KMmIC1k6+mMbULhDuvW0KH+twjDLZLR3q3IaJkkIWA0SCgfAqB84 s1Vx967nYMAUAsyvMupnm8JwTMpKsAdINzdA02y6g8Ze4Ka46gVTyMbmb5fsEF/M clNPHojC+GhF4TYxx2Ye0/02hoT1h6SwzbJemqaiSV32Jm8KDT01YubeiM4iBDHQ 78agqYj0wAQ8xB9APfyv46bJZ1UeY86gRMlwoyiu/TL4CyHHg/+9hhV13IHcCzKs c0S5FH3e980XDEEYuKu8FKZ3wVRtn6BaNLuyadhQB1xBXIAMc5nOINJU6pAIchj2 8bBSmLQpFvQ2eLh9vETuFbsm5RTsVw7YOQ5/W6znYWKkDQMP2OtokPvdWTItknmf gU1BD4dCVxJWHjhcGUTm3qDwYMNUtHeIWtwmiMQXPhCg2SbkinuvTQbVjRvnNy+1 Yi3CEhjIrD9VGa2Wam23Bm/rrOInKw9vFFvDdTbRMrGRYkIB9PWgjcWCDdzWmKCR Pyzfi9O+vKQ1jZTOjCIm6oaYJuHzDQ0cZJV7wP0YJN0kZkqcc0pMENehkqJpYcst dr5oCt1fcGYkklP6At0v =nvzr -----END PGP SIGNATURE----- --xhJxprRH8Q4al5cy--