Re: Exposure related to GUC value of ssl_passphrase_command

2020-03-08 Thread Moon, Insung
Dear Kuroda-san, Fujii-san Thank you for review and commit! #Oops.. Sorry..This mail thread has been spammed in Gmail. I'll go to submit a new discussion after found which case could leak about the GUC parameters related to ssl_*. Please wait a bit. Best regards. Moon. On Mon, Mar 9, 2020 at 11:

Re: Exposure related to GUC value of ssl_passphrase_command

2020-03-08 Thread Fujii Masao
On 2020/03/06 16:20, keisuke kuroda wrote: The following review has been posted through the commitfest application: make installcheck-world: tested, passed Implements feature: tested, passed Spec compliant: tested, passed Documentation:not tested I tested the patc

Re: Exposure related to GUC value of ssl_passphrase_command

2020-03-08 Thread Fujii Masao
On 2020/02/14 10:31, Moon, Insung wrote: Dear Hackers. Thank you for an response. I registered this entry in commifest of 2020-03. # I registered in the security part, but if it is wrong, sincerely apologize for this. And I'd like to review show authority to ssl_ * later and discuss it in a

Re: Exposure related to GUC value of ssl_passphrase_command

2020-03-05 Thread keisuke kuroda
The following review has been posted through the commitfest application: make installcheck-world: tested, passed Implements feature: tested, passed Spec compliant: tested, passed Documentation:not tested I tested the patch on the master branch (addd034) and it works fi

Re: Exposure related to GUC value of ssl_passphrase_command

2020-02-13 Thread Moon, Insung
Dear Hackers. Thank you for an response. I registered this entry in commifest of 2020-03. # I registered in the security part, but if it is wrong, sincerely apologize for this. And I'd like to review show authority to ssl_ * later and discuss it in a separate thread. Best regards. Moon. On Thu,

Re: Exposure related to GUC value of ssl_passphrase_command

2020-02-13 Thread Peter Eisentraut
On 2020-02-13 04:38, Michael Paquier wrote: On Thu, Feb 13, 2020 at 11:28:05AM +0900, Kyotaro Horiguchi wrote: I think it is reasonable. Indeed, that makes sense to me as well. I am adding Peter Eisentraut in CC as the author/committer of 8a3d942 to comment on that. I'm OK with changing tha

Re: Exposure related to GUC value of ssl_passphrase_command

2020-02-12 Thread Michael Paquier
On Thu, Feb 13, 2020 at 11:28:05AM +0900, Kyotaro Horiguchi wrote: > I think it is reasonable. Indeed, that makes sense to me as well. I am adding Peter Eisentraut in CC as the author/committer of 8a3d942 to comment on that. > By the way, I'm not sure the criteria of setting a GUC variable as >

Re: Exposure related to GUC value of ssl_passphrase_command

2020-02-12 Thread Kyotaro Horiguchi
At Thu, 13 Feb 2020 02:37:29 +0900, Fujii Masao wrote in > On Fri, Nov 8, 2019 at 4:24 PM Amit Langote wrote: > > > > Hello. > > > > On Tue, Nov 5, 2019 at 5:15 PM Moon, Insung > > wrote: > > > Deal Hackers. > > > > > > The value of ssl_passphrase_command is set so that an external command >

Re: Exposure related to GUC value of ssl_passphrase_command

2020-02-12 Thread Fujii Masao
On Fri, Nov 8, 2019 at 4:24 PM Amit Langote wrote: > > Hello. > > On Tue, Nov 5, 2019 at 5:15 PM Moon, Insung > wrote: > > Deal Hackers. > > > > The value of ssl_passphrase_command is set so that an external command > > is called when the passphrase for decrypting an SSL file such as a > > priva

Re: Exposure related to GUC value of ssl_passphrase_command

2019-11-07 Thread Amit Langote
Hello. On Tue, Nov 5, 2019 at 5:15 PM Moon, Insung wrote: > Deal Hackers. > > The value of ssl_passphrase_command is set so that an external command > is called when the passphrase for decrypting an SSL file such as a > private key is obtained. > Therefore, easily set to work with echo "passphras