From: Robbie Harwood <rharwood@redhat.com>
To: Stephen Frost <sfrost@snowman.net>
Cc: Dmitry Dolgov <9erthalion6@gmail.com>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Heikki Linnakangas <hlinnaka@iki.fi>
Cc: PostgreSQL-development <pgsql-hackers@postgresql.org>
Cc: nico@cryptonector.com
Subject: Re: [PATCH v19] GSSAPI encryption support
Date: Tue, 04 Dec 2018 18:46:53 -0500
Message-ID: <jlgsgzc26tu.fsf@redhat.com> (raw)
In-Reply-To: <20181203212047.GM3415@tamriel.snowman.net>
References: <jlg1tgq1ktm.fsf@thriss.redhat.com>
<jlg1se287n3.fsf@redhat.com>
<jlg602phyn5.fsf@redhat.com>
<82e75cb9-9676-6852-74de-1454a5cc97d7@iki.fi>
<20180806143633.GJ27724@tamriel.snowman.net>
<jlgd0uvyysv.fsf@redhat.com>
<20181002013258.GY11712@paquier.xyz>
<jlgk1n0dpf3.fsf@redhat.com>
<CA+q6zcXE6QuP2u=LW0MUG5fOsE7=kQva4kuNcm37hJ=yEzo+tg@mail.gmail.com>
<20181203212047.GM3415@tamriel.snowman.net>
Stephen Frost <sfrost@snowman.net> writes:
> Greetings Robbie,
>
> * Dmitry Dolgov (9erthalion6@gmail.com) wrote:
>> > On Tue, Oct 2, 2018 at 11:12 PM Robbie Harwood <rharwood@redhat.com> wrote:
>> >
>> > Michael Paquier <michael@paquier.xyz> writes:
>> >
>> > > On Mon, Aug 06, 2018 at 05:23:28PM -0400, Robbie Harwood wrote:
>> > >> If you're in a position where you're using Kerberos (or most other
>> > >> things from the GSSAPI) for authentication, the encryption comes at
>> > >> little to no additional setup cost. And then you get all the security
>> > >> benefits outlined in the docs changes.
>> > >
>> > > Please note that the last patch set does not apply anymore, so I have
>> > > moved it to CF 2018-11 and marked it as waiting on author.
>> >
>> > Indeed. Please find v19 attached. It's just a rebase; no architecture
>> > changes.
>>
>> Unfortunately, patch needs another rebase, could you do this? In the meantime
>> I'll move it to the next CF.
>
> This patch needs a few minor changes to get it back to working, but I'm
> happy to say that with those changes, it seems to be working rather well
> for me.
Thanks Stephen!
Dmitry, I will make an update (and address Stephen's feedback) hopefully
soon.
Thanks,
--Robbie
Attachments:
signature.asc (application/pgp-signature, 832B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: rharwood@redhat.com, sfrost@snowman.net, 9erthalion6@gmail.com, michael@paquier.xyz, hlinnaka@iki.fi, nico@cryptonector.com
Subject: Re: [PATCH v19] GSSAPI encryption support
In-Reply-To: <jlgsgzc26tu.fsf@redhat.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox