From: Tom Lane <tgl@sss.pgh.pa.us>
To: Stephen Frost <sfrost@snowman.net>
cc: Robert Haas <robertmhaas@gmail.com>,
 Heikki Linnakangas <hlinnakangas@vmware.com>,
 Magnus Hagander <magnus@hagander.net>,
 PostgreSQL-development <pgsql-hackers@postgresql.org>
Subject: Re: PQgetssl() and alternative SSL implementations
In-reply-to: <20150128165847.GY3854@tamriel.snowman.net>
References: <53F1E989.8020609@vmware.com>
 <CA+TgmoZDJ6CKiuBMqNk3iS7LQ9GZuzS7RTYSOvRu8kJjRKWLng@mail.gmail.com>
 <CABUevExpTZpMAMvr=BkeO5-XG_zgZP=TKdyCCpgEpYc0Htjr8Q@mail.gmail.com>
 <10419.1408475397@sss.pgh.pa.us>
 <CABUevEy03OvP3N3wBRVP7BcmwcHf=Qi6Crb2MHo4dVmG--ZnVg@mail.gmail.com>
 <CA+TgmoaKHd+HW8kOgzovdSTWhauEsV0qeRsxPLpEZfSNDiSP=g@mail.gmail.com>
 <53F3C87E.2080401@vmware.com> <54C8FCB0.4050304@vmware.com>
 <CA+TgmoYrAH=o8m9959O_TgHm7OcK9C=f3WJfUHryb4pzu5uZ0A@mail.gmail.com>
 <20150128165847.GY3854@tamriel.snowman.net>
Comments: In-reply-to Stephen Frost <sfrost@snowman.net>
 message dated "Wed, 28 Jan 2015 11:58:47 -0500"
Date: Wed, 28 Jan 2015 12:04:45 -0500
Message-ID: <32652.1422464685@sss.pgh.pa.us>
Precedence: bulk
Sender: pgsql-hackers-owner@postgresql.org

Stephen Frost <sfrost@snowman.net> writes:
> What bothers me about this is that it punts SSL work to the application
> and requires that they be coded to work with both OpenSSL and whatever
> else we implement (eg: GnuTLS) to do anything but the most simple
> checks.  That's a problem because people are *not* going to want to
> #include both OpenSSL and GnuTLS headers into their applications because
> they don't know which PG will be compiled with..  Not to mention that
> it'd be darn awkward to do so.

The point of this is to provide an escape hatch for people who really
want to do XYZ even though we provide no API for XYZ in libpq.  Hopefully,
those people will be few and far between, because anything that's a really
common requirement should be catered for by libpq.

			regards, tom lane


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers