Postgres Pro
Downloads
Home   >   mailing lists

Re: Allowing SSL connection of v11 client to v10 server with SCRAM channel binding - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Allowing SSL connection of v11 client to v10 server with SCRAM channel binding
Date
Msg-id 17915.1511154277@sss.pgh.pa.us
Whole thread Raw
In response to Allowing SSL connection of v11 client to v10 server with SCRAMchannel binding  (Michael Paquier <michael.paquier@gmail.com>)
Responses Re: Allowing SSL connection of v11 client to v10 server with SCRAMchannel binding  (Michael Paquier <michael.paquier@gmail.com>)
List pgsql-hackers
Tree view 
Michael Paquier <michael.paquier@gmail.com> writes:
> When trying to connect to a v11 client based on current HEAD to a v10
> server using SSL, then the connection would fail.

That's bad ...

> The attached patch,
> for REL_10_STABLE, allows a server to accept as well as input "eSws",
> which is a combination that can now happen. This way, a v10 server
> accepts connections from a v11 and newer client with SSL.

This is not an acceptable fix.  We have to maintain the ability to connect
to unpatched older servers.  If features added to HEAD have broken that,
either we fix those features to be backwards compatible, or we revert
them.
        regards, tom lane

pgsql-hackers by date:

Previous
From: 高增琦
Date:
Subject: Re: no library dependency in Makefile?
Next
From: Michael Paquier
Date:
Subject: Re: Allowing SSL connection of v11 client to v10 server with SCRAMchannel binding