Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit400be4e

Browse files
committed
Document problem with NULL SSL ciphers and man-in-the-middle attacks.
1 parentf5678e8 commit400be4e

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

‎doc/src/sgml/runtime.sgml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.397 2007/12/25 17:06:52 momjian Exp $ -->
1+
<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.398 2007/12/29 03:36:56 momjian Exp $ -->
22

33
<chapter Id="runtime">
44
<title>Operating System Environment</title>
@@ -1604,7 +1604,10 @@ $ <userinput>kill -INT `head -1 /usr/local/pgsql/data/postmaster.pid`</userinput
16041604
ciphers can be specified in the <productname>OpenSSL</productname>
16051605
configuration file, you can specify ciphers specifically for use by
16061606
the database server by modifying <xref linkend="guc-ssl-ciphers"> in
1607-
<filename>postgresql.conf</>.
1607+
<filename>postgresql.conf</>. It is possible to allow authentication
1608+
without the overhead of encryption by using <literal>NULL-SHA</> or
1609+
<literal>NULL-MD5</> ciphers. However, a man-in-the-middle could read
1610+
and pass communications between client and server.
16081611
</para>
16091612

16101613
<para>

0 commit comments

Comments
 (0)

[8]ページ先頭

©2009-2025 Movatter.jp