[BUGS] BUG #4339: The postgreSQL service stops abnormally

2008-08-04 Thread Bhaskar Sirohi
The following bug has been logged online: Bug reference: 4339 Logged by: Bhaskar Sirohi Email address: [EMAIL PROTECTED] PostgreSQL version: 8.3.3 Operating system: Windows 2003 Server Description:The postgreSQL service stops abnormally Details: Hi All, The postgre

[BUGS] BUG #4340: SECURITY: Is SSL Doing Anything?

2008-08-04 Thread Dan Kaminsky
The following bug has been logged online: Bug reference: 4340 Logged by: Dan Kaminsky Email address: [EMAIL PROTECTED] PostgreSQL version: 7.3 Operating system: Any Description:SECURITY: Is SSL Doing Anything? Details: http://www.google.com/codesearch?hl=en&q=verif

Re: [BUGS] BUG #4340: SECURITY: Is SSL Doing Anything?

2008-08-04 Thread Tom Lane
"Dan Kaminsky" <[EMAIL PROTECTED]> writes: > Clearly, this is handling self-signed certs. Great. But what I really want > to know is, is verify_peer accepting a self-signed identity assertion? > Because that'd be remote EoP. I'm just guessing what you're driving at (unexplained acronyms aren't

Re: [BUGS] BUG #4340: SECURITY: Is SSL Doing Anything?

2008-08-04 Thread Dan Kaminsky
Tom Lane wrote: "Dan Kaminsky" <[EMAIL PROTECTED]> writes: Clearly, this is handling self-signed certs. Great. But what I really want to know is, is verify_peer accepting a self-signed identity assertion? Because that'd be remote EoP. I'm just guessing what you're driving at (unex

Re: [BUGS] BUG #4340: SECURITY: Is SSL Doing Anything?

2008-08-04 Thread Tom Lane
Dan Kaminsky <[EMAIL PROTECTED]> writes: > Lets talk about the verify_cb callback first: Suppose there's a > man-in-the-middle between the PG client and the PG server. Is some > secondary force going to apply some Trusted CA list? I'm not sure why we have verify_cb at all -- so far as I ca