Commit 8dd1511e authored by Stephen Frost's avatar Stephen Frost

Improve GSSAPI Encryption startup comment in libpq

The original comment was a bit confusing, pointed out by Alvaro Herrera.

Thread: https://postgr.es/m/20191224151520.GA16435%40alvherre.pgsql
parent 4ac8aaa3
...@@ -2800,10 +2800,12 @@ keep_going: /* We will come back to here until there is ...@@ -2800,10 +2800,12 @@ keep_going: /* We will come back to here until there is
#ifdef ENABLE_GSS #ifdef ENABLE_GSS
/* /*
* If GSSAPI is enabled and we have a credential cache, try to * If GSSAPI encryption is enabled, then call
* set it up before sending startup messages. If it's already * pg_GSS_have_cred_cache() which will return true if we can
* operating, don't try SSL and instead just build the startup * acquire credentials (and give us a handle to use in
* packet. * conn->gcred), and then send a packet to the server asking
* for GSSAPI Encryption (and skip past SSL negotiation and
* regular startup below).
*/ */
if (conn->try_gss && !conn->gctx) if (conn->try_gss && !conn->gctx)
conn->try_gss = pg_GSS_have_cred_cache(&conn->gcred); conn->try_gss = pg_GSS_have_cred_cache(&conn->gcred);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment