1. 17 Jun, 2002 7 commits
  2. 16 Jun, 2002 2 commits
  3. 15 Jun, 2002 24 commits
  4. 14 Jun, 2002 7 commits
    • Dave Cramer's avatar
      added empty result set testing · fd8b1539
      Dave Cramer authored
      fd8b1539
    • Dave Cramer's avatar
      added empty result set testing · 6e2fab0a
      Dave Cramer authored
      6e2fab0a
    • Bruce Momjian's avatar
      Yet another SSL patch. :-) This one adds some informational messages · 1ed4a922
      Bruce Momjian authored
      on the server, if DebugLvl >= 2.
      
      The patch also includes a late addition to the last patch
      (X509_check_private_key()).  I'm not sure why it the currect
      revision wasn't tagged.
      
      
      Bear Giles
      1ed4a922
    • Bruce Momjian's avatar
      SSL patch that adds support for optional client certificates. · eb7afc14
      Bruce Momjian authored
      If the user has certificates in $HOME/.postgresql/postgresql.crt
      and $HOME/.postgresql/postgresql.key exist, they are provided
      to the server.  The certificate used to sign this cert must be
      known to the server, in $DataDir/root.crt.  If successful, the
      cert's "common name" is logged.
      
      Client certs are not used for authentication, but they could be
      via the port->peer (X509 *), port->peer_dn (char *) or
      port->peer_cn (char *) fields.  Or any other function could be
      used, e.g., many sites like the issuer + serial number hash.
      
      Bear Giles
      eb7afc14
    • Bruce Momjian's avatar
      Patch that checks ownership and permissions on server static · b8b6691e
      Bruce Momjian authored
      private key.  (You want it to be a regular file owned by the
      database process, with 0400 or 0600 permissions.)
      
      Bear Giles
      b8b6691e
    • Bruce Momjian's avatar
      SSL patch to periodically renegotiate session key. · 8f440246
      Bruce Momjian authored
      In order to reduce the risk of cryptanalysis during extended
      sessions (or brief ones involving a substantial amount of data),
      this patch renegotiates the session key after 64kib has been
      transferred.
      
      Bear Giles
      8f440246
    • Bruce Momjian's avatar
      SSL support for ephemeral DH keys. · 55d05323
      Bruce Momjian authored
      As the comment headers in be-secure.c discusses, EPH preserves
      confidentiality even if the static private key (which is usually
      kept unencrypted) is compromised.
      
      Because of the value of this, common default values are hard-coded
      to protect the confidentiality of the data even if an attacker
      successfully deletes or modifies the external file.
      
      Bear Giles
      55d05323