Postgres Pro
Downloads
Home   >   mailing lists

Re: Channel binding not supported using scram-sha-256 passwords - Mailing list pgsql-general

From Michael Paquier
Subject Re: Channel binding not supported using scram-sha-256 passwords
Date
Msg-id 20190221044758.GK15532@paquier.xyz
Whole thread Raw
In response to Re: Channel binding not supported using scram-sha-256 passwords  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
Responses Re: Channel binding not supported using scram-sha-256 passwords  (Peter Eisentraut <peter.eisentraut@2ndquadrant.com>)
List pgsql-general
Tree view 
On Wed, Feb 20, 2019 at 04:53:32PM +0100, Peter Eisentraut wrote:
> I think there is a bug in the frontend code.  If the server offers
> SCRAM-SHA-256-PLUS, the client will choose it if SSL is in use, but it
> will later fail with this error message if not
> HAVE_PGTLS_GET_PEER_CERTIFICATE_HASH.

Good catch!  Indeed that's not a good idea.  What do you think about
the attached to fix the issue?
--
Michael
Attachment

pgsql-general by date:

Previous
From: rob stone
Date:
Subject: Re: Connection string for Java to connect to PostgreSQL, usingclient certificates
Next
From: Adrian Klaver
Date:
Subject: Re: Plpythonu extension