Re: [HACKERS] host and hostssl equivalence in pg_hba.conf

2003-06-10 Thread Bruce Momjian
Nigel J. Andrews wrote: > > How do people feel about changing matching for host and hostssl to be such that > a plain host line in pg_hba.conf does not allow a SSL connection but requires > the hostssl specifier? > > I had been going to submit a very small patch to do this but then it occurred >

Re: [HACKERS] host and hostssl equivalence in pg_hba.conf

2003-06-10 Thread Tom Lane
"Nigel J. Andrews" <[EMAIL PROTECTED]> writes: > On Tue, 10 Jun 2003, Tom Lane wrote: >> If your real gripe is that libpq insists on trying SSL connections >> first, the server is the wrong end to be patching that problem at. >> There should be a way to control libpq's allow_ssl_try state variable

Re: [HACKERS] host and hostssl equivalence in pg_hba.conf

2003-06-10 Thread Nigel J. Andrews
On Tue, 10 Jun 2003, Tom Lane wrote: > "Nigel J. Andrews" <[EMAIL PROTECTED]> writes: > > How do people feel about changing matching for host and hostssl to be such that > > a plain host line in pg_hba.conf does not allow a SSL connection but requires > > the hostssl specifier? > > Then there wou

Re: [HACKERS] host and hostssl equivalence in pg_hba.conf

2003-06-10 Thread Jon Jensen
On Tue, 10 Jun 2003, Nigel J. Andrews wrote: > How do people feel about changing matching for host and hostssl to be such that > a plain host line in pg_hba.conf does not allow a SSL connection but requires > the hostssl specifier? Nigel, We had discussed overhauling the connection settings on b

Re: [HACKERS] host and hostssl equivalence in pg_hba.conf

2003-06-10 Thread Tom Lane
"Nigel J. Andrews" <[EMAIL PROTECTED]> writes: > How do people feel about changing matching for host and hostssl to be such that > a plain host line in pg_hba.conf does not allow a SSL connection but requires > the hostssl specifier? Then there would be no way to have a host entry that allowed bot

Re: [HACKERS] host and hostssl equivalence in pg_hba.conf

2003-06-10 Thread Nigel J. Andrews
How do people feel about changing matching for host and hostssl to be such that a plain host line in pg_hba.conf does not allow a SSL connection but requires the hostssl specifier? I had been going to submit a very small patch to do this but then it occurred to me this was a good candidate for a