Re: SSL renegotiation - Mailing list pgsql-hackers

From Tom Lane
Subject Re: SSL renegotiation
Date
Msg-id 22907.1384530203@sss.pgh.pa.us
Whole thread Raw
In response to Re: SSL renegotiation  (Alvaro Herrera <alvherre@2ndquadrant.com>)
Responses Re: SSL renegotiation  (Andres Freund <andres@2ndquadrant.com>)
List pgsql-hackers
Alvaro Herrera <alvherre@2ndquadrant.com> writes:
> So I committed this patch without backpatching anything. ...
> ... should we wait longer for the new renegotiation code to
> be more battle-tested?

+1 to waiting awhile.  I think if we don't see any problems in
HEAD, then back-patching as-is would be the best solution.
The other alternatives are essentially acknowledging that you're
back-patching something you're afraid isn't production ready.
Let's not go there.

Another reason I'm not in a hurry is that the problem we're trying
to solve doesn't seem to be causing real-world trouble.  So by
"awhile", I'm thinking "let's let it get through 9.4 beta testing".
        regards, tom lane



pgsql-hackers by date:

Previous
From: Stephen Frost
Date:
Subject: Re: strncpy is not a safe version of strcpy
Next
From: Andres Freund
Date:
Subject: Re: SSL renegotiation