Re: SSL for ODBC connection

2018-01-29 Thread Denis Magda
Igor, Thanks for the references. Now it makes total sense to me. Let’s go for your approach suggested earlier. — Denis > On Jan 29, 2018, at 3:50 AM, Igor Sapego wrote: > > Denis, > > For example, there are often such options as "verify-ca" and "verify-full". > [1-3] > Moreover, this approac

Re: SSL for ODBC connection

2018-01-29 Thread Pavel Tupitsyn
Agree with Igor, we should be able to configure verification in future, and this approach seems to be widely used. On Mon, Jan 29, 2018 at 2:50 PM, Igor Sapego wrote: > Denis, > > For example, there are often such options as "verify-ca" and "verify-full". > [1-3] > Moreover, this approach seems

Re: SSL for ODBC connection

2018-01-29 Thread Igor Sapego
Denis, For example, there are often such options as "verify-ca" and "verify-full". [1-3] Moreover, this approach seems more consistent with other solutions and thus more familiar to user. [1] - https://www.postgresql.org/docs/9.1/static/libpq-ssl.html [2] - https://docs.oracle.com/cd/E17952_01/co

Re: SSL for ODBC connection

2018-01-26 Thread Denis Magda
Igor, Why it might be not enough to have ssl_enabled=[true | false]? Could you give an example since you’ve already did a research? — Denis > On Jan 26, 2018, at 6:08 AM, Igor Sapego wrote: > > Guys, > > The SSL for the ODBC is pretty much ready and working, so > here is update on the curre

Re: SSL for ODBC connection

2018-01-26 Thread Igor Sapego
Guys, The SSL for the ODBC is pretty much ready and working, so here is update on the current state I want to share with you. And of course, I'd like to to hear your opinion on this one. First of all, I've checked some discussions about the ssl_mode approaches in different ODBC drivers and it see

Re: SSL for ODBC connection

2017-11-20 Thread Denis Magda
This configuration approach looks clearer to me. +1 for it. — Denis > On Nov 20, 2017, at 12:42 AM, Igor Sapego wrote: > > Ok, then how about the following set of options: > > ssl_enabled=[true|false] > ssl_key_file= > ssl_cert_file= > > > Best Regards, > Igor > > On Tue, Nov 14, 2017 at 5:

Re: SSL for ODBC connection

2017-11-20 Thread Igor Sapego
Ok, then how about the following set of options: ssl_enabled=[true|false] ssl_key_file= ssl_cert_file= Best Regards, Igor On Tue, Nov 14, 2017 at 5:21 PM, Vladimir Ozerov wrote: > I think it would be enough to have a single switch for now. > > On Tue, Nov 7, 2017 at 10:04 PM, Denis Magda wro

Re: SSL for ODBC connection

2017-11-14 Thread Vladimir Ozerov
I think it would be enough to have a single switch for now. On Tue, Nov 7, 2017 at 10:04 PM, Denis Magda wrote: > Igor, > > Thanks for the clarification. Please file a ticket if nobody else shares a > feedback soon. > > — > Denis > > > On Nov 7, 2017, at 1:23 AM, Igor Sapego wrote: > > > > Hi D

Re: SSL for ODBC connection

2017-11-07 Thread Denis Magda
Igor, Thanks for the clarification. Please file a ticket if nobody else shares a feedback soon. — Denis > On Nov 7, 2017, at 1:23 AM, Igor Sapego wrote: > > Hi Denis, > >> Could you explain the difference between “allow, prefer and require” > modes? > allow - Client will first try connecting

Re: SSL for ODBC connection

2017-11-07 Thread Igor Sapego
Hi Denis, > Could you explain the difference between “allow, prefer and require” modes? allow - Client will first try connecting without SSL, and then fallback to SSL if it is not allowed to connect without SSL; prefer - Client will first try connecting using SSL, and then fallback to non-SSL if S

Re: SSL for ODBC connection

2017-11-03 Thread Denis Magda
Hi Igor, Could you explain the difference between “allow, prefer and require” modes? BTW, do we really need to have the “disable” one? Guess that having ssl_mode set to “disable” will have the same effect as not setting the ssl_mode at all. — Denis > On Nov 3, 2017, at 9:04 AM, Igor Sapego w

SSL for ODBC connection

2017-11-03 Thread Igor Sapego
Hi, Igniters, I'm going to start working on the SSL support for the ODBC connection and I need to hear your opinion. For the client side I'm going to use OpenSSL library [1], which is standard de-facto for C/C++ applications. Unfortunately its licence is not fully compatible with Apache Licence,