Re: [HACKERS] SSL configure patch: review

2008-11-21 Thread Magnus Hagander
Alvaro Herrera wrote: > Magnus Hagander escribió: >> Alex Hunsaker wrote: >>> On Fri, Aug 1, 2008 at 13:31, Alvaro Herrera <[EMAIL PROTECTED]> wrote: Something that's bothering me is that PGSSLKEY is inconsistent with the sslkey conninfo parameter. PGSSLKEY specifies an engine (basically

Re: [HACKERS] SSL configure patch: review

2008-11-21 Thread Alvaro Herrera
Magnus Hagander escribió: > Alex Hunsaker wrote: > > On Fri, Aug 1, 2008 at 13:31, Alvaro Herrera <[EMAIL PROTECTED]> wrote: > >> Something that's bothering me is that PGSSLKEY is inconsistent with the > >> sslkey conninfo parameter. PGSSLKEY specifies an engine (basically a > >> driver for specia

Re: [HACKERS] SSL configure patch: review

2008-11-21 Thread Magnus Hagander
Alex Hunsaker wrote: > On Fri, Aug 1, 2008 at 13:31, Alvaro Herrera <[EMAIL PROTECTED]> wrote: >> Something that's bothering me is that PGSSLKEY is inconsistent with the >> sslkey conninfo parameter. PGSSLKEY specifies an engine (basically a >> driver for specialized hardware AFAICT) from which th

Re: [HACKERS] SSL configure patch: review

2008-11-20 Thread Alex Hunsaker
On Fri, Aug 1, 2008 at 13:31, Alvaro Herrera <[EMAIL PROTECTED]> wrote: > Something that's bothering me is that PGSSLKEY is inconsistent with the > sslkey conninfo parameter. PGSSLKEY specifies an engine (basically a > driver for specialized hardware AFAICT) from which the key is to be > loaded, b

Re: [HACKERS] SSL configure patch: review

2008-08-01 Thread Alvaro Herrera
Tom Lane wrote: > BTW, doesn't this patch leak memory at freePGconn() time? Doh -- right, fixed. > I also think that more of it should be inside #ifdef USE_SSL --- ie, > the options should be treated like requiressl not sslmode, and not > exist in a non-SSL build. I wondered about that too, and

Re: [HACKERS] SSL configure patch: review

2008-08-01 Thread Alvaro Herrera
Tom Lane wrote: > Alvaro Herrera <[EMAIL PROTECTED]> writes: > > I've hacked up a couple of SGML paragraphs to serve as documentation. > > The patch is attached. I'll revise it (and make sure it compiles > > properly) and see about committing it later today. > > Weren't there a couple of other po

Re: [HACKERS] SSL configure patch: review

2008-08-01 Thread Tom Lane
BTW, doesn't this patch leak memory at freePGconn() time? I also think that more of it should be inside #ifdef USE_SSL --- ie, the options should be treated like requiressl not sslmode, and not exist in a non-SSL build. regards, tom lane -- Sent via pgsql-hackers mailing

Re: [HACKERS] SSL configure patch: review

2008-08-01 Thread Tom Lane
Alvaro Herrera <[EMAIL PROTECTED]> writes: > I've hacked up a couple of SGML paragraphs to serve as documentation. > The patch is attached. I'll revise it (and make sure it compiles > properly) and see about committing it later today. Weren't there a couple of other points in ams' review that we

Re: [HACKERS] SSL configure patch: review

2008-08-01 Thread Alvaro Herrera
Abhijit Menon-Sen wrote: > At 2008-07-08 08:27:29 +0530, [EMAIL PROTECTED] wrote: > > > > (The patch is whitespace-damaged and the one fe-secure.c hunk doesn't > > apply cleanly to the latest source, but I'm ignoring both problems for > > the moment.) > > It wasn't hard to fix those, so I've attac

Re: [HACKERS] SSL configure patch: review

2008-07-07 Thread Abhijit Menon-Sen
At 2008-07-08 08:27:29 +0530, [EMAIL PROTECTED] wrote: > > (The patch is whitespace-damaged and the one fe-secure.c hunk doesn't > apply cleanly to the latest source, but I'm ignoring both problems for > the moment.) It wasn't hard to fix those, so I've attached an updated patch here. > Finally,

[HACKERS] SSL configure patch: review

2008-07-07 Thread Abhijit Menon-Sen
These are my review comments on Mark Woodward's "SSL configure patch": http://archives.postgresql.org/message-id/[EMAIL PROTECTED] (The patch is whitespace-damaged and the one fe-secure.c hunk doesn't apply cleanly to the latest source, but I'm ignoring both problems for the moment.) 1. To begin