Re: Channel binding not supported using scram-sha-256 passwords - Mailing list pgsql-general

From Peter Eisentraut
Subject Re: Channel binding not supported using scram-sha-256 passwords
Date
Msg-id 134517f0-2736-37ed-02c0-da3d41c7a0db@2ndquadrant.com
Whole thread Raw
In response to Re: Channel binding not supported using scram-sha-256 passwords  (Michael Paquier <michael@paquier.xyz>)
Responses Re: Channel binding not supported using scram-sha-256 passwords
List pgsql-general
On 2019-02-21 05:47, Michael Paquier wrote:
>              if (conn->ssl_in_use)
> +            {
> +                /*
> +                 * The server has offered SCRAM-SHA-256-PLUS, which is only
> +                 * supported by the client if a hash of the peer certificate
> +                 * can be created.
> +                 */
> +#ifdef HAVE_PGTLS_GET_PEER_CERTIFICATE_HASH
>                  selected_mechanism = SCRAM_SHA_256_PLUS_NAME;
> +#endif
> +            }

Is that right?  Won't we then just select nothing if the macro is not
defined?

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services


pgsql-general by date:

Previous
From: Peter Eisentraut
Date:
Subject: Re: procedures and transactions
Next
From: Tiffany Thang
Date:
Subject: Re: Copy entire schema A to a different schema B