It has a few semi-serious bugs. One is that it can't initdb (xpg_user
no such file or directory) and another is that copy from doesn't seem
to work all the time for more than a few lines. I haven't been able
to track down the xpg_user. I could modify the patch to use
--with-ssl in configure -- i've also updated the patch so that the
unix socket doesn't use SSL and added support for an SSL port and a
non-SSL port.
I'd like to work on certificate verification, but i'm not sure exactly
how that might work yet.
On Fri, 21 August 1998, at 22:33:16, Bruce Momjian wrote:
> Where are we this this in relation to 6.4?
>
> >
> > okay -- I've seriously updated the SSL patch (practically rewritten)
> > and we're even using it here @ work, and it works great. If you used
> > it before, be sure to read the info page as the behavior has changed
> > drastically.
> >
> > it is two patches now, one to funnel all be/fe communication through
> > my functions pq_read/write and one to add SSL on top of that. i'm not
> > going to bother releasing the comm patch as I'll have to rewrite it
> > for the snapshot version of pgsql.
> >
> > I plan on including a beta version pl/perl with the 6.4 (can beta
> > software exist in contrib?) for those who are wondering. I'm short on
> > time, but I am dedicated to this project.
> >
> > that's about it -- check out the SSL stuff if you like, at the
> > following spacetime coordinate and listen to me beg for a job:
> >
> > http://www.chicken.org/pgsql/ssl/
> >
> > btw -- thanks for the link on postgresql.org
> >
> > also, does anyone know if i'm illegally distributing encryption
> > software? not that I give a rats ass, but I am curious.
> >
> > i'll announce SSL patch to the general list soon if that is
> > appropriate..
> >
> >
>
>
> --
> Bruce Momjian | 830 Blythe Avenue
> maillist@candle.pha.pa.us | Drexel Hill, Pennsylvania 19026
> + If your life is a hard drive, | (610) 353-9879(w)
> + Christ can be your backup. | (610) 853-3000(h)
