Re: SSL over Unix-domain sockets - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: SSL over Unix-domain sockets
Date
Msg-id 200801041835.03195.peter_e@gmx.net
Whole thread Raw
In response to Re: SSL over Unix-domain sockets  (Bruce Momjian <bruce@momjian.us>)
Responses Re: SSL over Unix-domain sockets  (Bruce Momjian <bruce@momjian.us>)
List pgsql-hackers
Am Freitag, 4. Januar 2008 schrieb Bruce Momjian:
> Peter Eisentraut wrote:
> > Using the attached patch, SSL will act over Unix-domain sockets.  AFAICT,
> > this just works.  I didn't find a way to sniff a Unix-domain socket,
> > however.
> >
> > How should we proceed with this?
>
> I am confused by the shortness of this patch.  Right now pg_hba.conf
> has:
>
>     # host       DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
>     # hostssl    DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
>     # hostnossl  DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
>
> These are all for TCP connections.  How do we handle 'local' SSL
> connection specification?  Do we want to provide similar functionality
> for local connections?

Yes, we might want to add that as well.  That and some documentation updates 
would probably cover everything.

-- 
Peter Eisentraut
http://developer.postgresql.org/~petere/


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: SSL over Unix-domain sockets
Next
From: Bruce Momjian
Date:
Subject: Re: SSL over Unix-domain sockets