- Notifications
You must be signed in to change notification settings - Fork5
Commitd494e68
committed
Allow full SSL certificate verification (wherein libpq checks its host name
parameter against server cert's CN field) to succeed in the case whereboth host and hostaddr are specified. As with the existing precedentsfor Kerberos, GSSAPI, SSPI, it is the calling application's responsibilitythat host and hostaddr match up --- we just use the host name as given.Per bug #5559 from Christopher Head.In passing, make the error handling and messages for the no-host-name-givenfailure more consistent among these four cases, and correct a lie in thedocumentation: we don't attempt to reverse-lookup host from hostaddrif host is missing.Back-patch to 8.4 where SSL cert verification was introduced.1 parent1cc29fe commitd494e68
File tree
4 files changed
+38
-33
lines changed- doc/src/sgml
- src/interfaces/libpq
4 files changed
+38
-33
lines changedLines changed: 21 additions & 17 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 |
| - | |
| 1 | + | |
2 | 2 |
| |
3 | 3 |
| |
4 | 4 |
| |
| |||
162 | 162 |
| |
163 | 163 |
| |
164 | 164 |
| |
165 |
| - | |
166 |
| - | |
167 |
| - | |
168 |
| - | |
169 |
| - | |
170 |
| - | |
171 |
| - | |
172 |
| - | |
173 |
| - | |
174 |
| - | |
175 |
| - | |
176 |
| - | |
177 |
| - | |
178 |
| - | |
179 |
| - | |
180 |
| - | |
| 165 | + | |
| 166 | + | |
| 167 | + | |
| 168 | + | |
| 169 | + | |
| 170 | + | |
| 171 | + | |
| 172 | + | |
| 173 | + | |
| 174 | + | |
| 175 | + | |
| 176 | + | |
| 177 | + | |
| 178 | + | |
| 179 | + | |
| 180 | + | |
| 181 | + | |
| 182 | + | |
| 183 | + | |
| 184 | + | |
181 | 185 |
| |
182 | 186 |
| |
183 | 187 |
| |
|
Lines changed: 9 additions & 7 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
7 | 7 |
| |
8 | 8 |
| |
9 | 9 |
| |
10 |
| - | |
| 10 | + | |
11 | 11 |
| |
12 | 12 |
| |
13 | 13 |
| |
| |||
206 | 206 |
| |
207 | 207 |
| |
208 | 208 |
| |
209 |
| - | |
| 209 | + | |
210 | 210 |
| |
211 | 211 |
| |
212 |
| - | |
| 212 | + | |
213 | 213 |
| |
214 | 214 |
| |
215 | 215 |
| |
| |||
426 | 426 |
| |
427 | 427 |
| |
428 | 428 |
| |
429 |
| - | |
| 429 | + | |
430 | 430 |
| |
431 |
| - | |
| 431 | + | |
| 432 | + | |
432 | 433 |
| |
433 | 434 |
| |
434 | 435 |
| |
| |||
652 | 653 |
| |
653 | 654 |
| |
654 | 655 |
| |
655 |
| - | |
| 656 | + | |
656 | 657 |
| |
657 |
| - | |
| 658 | + | |
| 659 | + | |
658 | 660 |
| |
659 | 661 |
| |
660 | 662 |
| |
|
Lines changed: 4 additions & 4 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
11 | 11 |
| |
12 | 12 |
| |
13 | 13 |
| |
14 |
| - | |
| 14 | + | |
15 | 15 |
| |
16 | 16 |
| |
17 | 17 |
| |
| |||
589 | 589 |
| |
590 | 590 |
| |
591 | 591 |
| |
592 |
| - | |
| 592 | + | |
593 | 593 |
| |
594 | 594 |
| |
595 | 595 |
| |
596 | 596 |
| |
597 | 597 |
| |
598 |
| - | |
| 598 | + | |
599 | 599 |
| |
600 | 600 |
| |
601 |
| - | |
| 601 | + | |
602 | 602 |
| |
603 | 603 |
| |
604 | 604 |
| |
|
Lines changed: 4 additions & 5 deletions
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
12 | 12 |
| |
13 | 13 |
| |
14 | 14 |
| |
15 |
| - | |
| 15 | + | |
16 | 16 |
| |
17 | 17 |
| |
18 | 18 |
| |
| |||
282 | 282 |
| |
283 | 283 |
| |
284 | 284 |
| |
285 |
| - | |
286 |
| - | |
287 |
| - | |
288 |
| - | |
| 285 | + | |
| 286 | + | |
| 287 | + | |
289 | 288 |
| |
290 | 289 |
| |
291 | 290 |
| |
|
0 commit comments
Comments
(0)