Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hBrhv-0006hy-73 for pgsql-hackers@arkaria.postgresql.org; Thu, 04 Apr 2019 02:02:23 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1hBrht-0005OL-Va for pgsql-hackers@arkaria.postgresql.org; Thu, 04 Apr 2019 02:02:21 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hBrht-00058r-G5 for pgsql-hackers@lists.postgresql.org; Thu, 04 Apr 2019 02:02:21 +0000 Received: from wout4-smtp.messagingengine.com ([64.147.123.20]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hBrhq-0001bU-P2 for pgsql-hackers@postgresql.org; Thu, 04 Apr 2019 02:02:20 +0000 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 5C3844B87; Wed, 3 Apr 2019 22:02:16 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute4.internal (MEProxy); Wed, 03 Apr 2019 22:02:17 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paquier.xyz; h= date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm1; bh=+BrEs8nUek0QI5pk046pq94zamp oBIrLxlJGGBzHTbk=; b=vq71nY38T/TxyvLbAypZk1JGvEkE/wBsUIXugxXpkvu c4KhrXZiUirNg5Cm+JaX4a3gOLcGNiF9/tnu4v4h+v0fK0REx+Al01ftekhPpTka IsOqht/HWjel73V4QQdlrsGUjI711TisLaVpgzuPePBZOpG/FqULja9ank92BVJJ MnPxlDq8sCWxEGP5rINbDxKsq5rFm3EoYiu08wSKB1MHv11PUafynqcRWt1edYMq da6hNVCX9PUmA8GLYzUYWl6Uvtl/wEd1qSt5AftJDg/YL0FbNzPNe5pRTfTUK5nM nOOAQMPF285Q3SWx12GAzEVlviVZwrMpU6NlIa1MC8Q== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=+BrEs8 nUek0QI5pk046pq94zampoBIrLxlJGGBzHTbk=; b=6OFffFe8yDGlok2dy7PxC+ hBaeXHHSVkl0MozNqEW4ZqqLKQ45nMVhwfBtbeusS1mbyrBSeGTrk4q/lPtv32N6 ploFL8p8N9IZIj+NOcWYA7oQsJZdjUeG7EFlptGdGOOppDtGAWXQJhm5Cq6m9Sru F+GxUp4aH0u66C4vhPwbvBhHW/dtmmnxuUR6amr5HqadrltaiRya+ATKxlkQSeTF RQn1RleJardYQaeeX2rT228hiVfbkqIAxtU/fJo8QGXi7lMEzi1aMeGZTj51YN/k gEmFr8Nslw7LWW9B1bLGxvdKp3s1/lq4xyo8Lup7UKihi90eof3/6FhUS52ejrow == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduuddrtdeggdehvdculddtuddrgedutddrtddtmd cutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdp uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivg hnthhsucdlqddutddtmdenfghrlhcuvffnffculdejtddmnecujfgurhepfffhvffukfhf gggtuggjsehgtderredttdejnecuhfhrohhmpefoihgthhgrvghlucfrrghquhhivghruc eomhhitghhrggvlhesphgrqhhuihgvrhdrgiihiieqnecukfhppeduuddurddutddvrddu kedtrddukeehnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmihgthhgrvghlsehprghquh hivghrrdighiiinecuvehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from paquier.xyz (ee0822lan1.rev.em-net.ne.jp [111.102.180.185]) by mail.messagingengine.com (Postfix) with ESMTPA id 80D7010316; Wed, 3 Apr 2019 22:01:59 -0400 (EDT) Date: Thu, 4 Apr 2019 11:01:48 +0900 From: Michael Paquier To: Stephen Frost Cc: Robbie Harwood , Alvaro Herrera , Andres Freund , David Steele , Joe Conway , Magnus Hagander , Nico Williams , Peter Eisentraut , PostgreSQL-development Subject: Re: [PATCH v20] GSSAPI encryption support Message-ID: <20190404020148.GD7693@paquier.xyz> References: <20190223162751.GO6197@tamriel.snowman.net> <1f799b02-d766-0328-45d6-73e5674d0bc2@2ndquadrant.com> <500b1be7-d0aa-96a2-9982-d748609faff5@joeconway.com> <20190403144332.GD6197@tamriel.snowman.net> <20190403200114.drqcvm77yp3r7lyd@alap3.anarazel.de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="fXStkuK2IQBfcDe+" Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --fXStkuK2IQBfcDe+ Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Apr 03, 2019 at 05:51:06PM -0400, Stephen Frost wrote: > Thanks so much for pushing on it for so long, it=E2=80=99s a great featur= e to have! Glad to see that the final result is using an API layer in be-secure.c and that we have tests. Now, shouldn't there be some documentation in protocol.sgml for the read and write handling of the encrypted messages? Other drivers could need to implement that stuff, no? We have that for SSL, with SSLRequest and such. -- Michael --fXStkuK2IQBfcDe+ Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAlylZYwACgkQnvQgOdby QH0rlQ/+O7AK6BnJDU3v6FSDKTEjeTFcq2XGZbXvgqO2aR81p9oa5qb3atmtiiCE EOhMmOzE0qGfbUY90fZw7955ID8qKfg7cICW66vYatek139g0Pawu+vuC286UDL/ xCzz4ku7XeUWs51KI4FAO/QeM8qtJvJeFIa6tAuucMLM+LJLCy62rQtwNdtz7ThH bzH5m74MNXKvvU/8HnDM3oY1PvwnIqZ0AbpcTSUMUnGwBZ5euGqMEtDrg6m+kD9h ZgYwgRwjR8N1UPuXSvYGM8dqc6RwcNc1G7WCAm4lHRa6RxJRrbHfQyv9YXm/QWZ+ BjKKq3iSefeOb0vynCz87e1rKIFJMBV3nOy9UMQ4oMReTDos1No/ySgx/kzy8umK 4O2ZtIZpKYij3heYuuSLCWEydw36OD9hCfElBJJt3noTpyGcmIThlnW0ZYRx46XV K7W7KVN1pq2SnmthlNYc83kpmQHCfPBBB7EcNPKId9zJf1LLssw3xNlWDG5BEP7x 70/Mo+d6mGJZsvD2kVboDUWv5oCyGhYIIICLnoWyYmp/xkV2lCLIuxj6jc1HV/uV t6v12cQ/n6zAkrogUv/c1ugXmIHdN9B7iaYEkWSjtrg4EZcYl9AvTSjzPJmbrkPA I8IZKAfAOyIgpNjo7RRo838jXxCLysjq53tr3Y/Kdix/XwRmTQc= =Wym4 -----END PGP SIGNATURE----- --fXStkuK2IQBfcDe+--