Re: [HACKERS] libpq and sslmode=require

2008-11-04 Thread Bruce Momjian
Bruce Momjian wrote: > > would impose a noticeable connection initiation overhead on everyone's > > Unix-domain socket uses. You could make it use SSL in require mode, but > > it seems weird that prefer mode would end up doing something different > > than require mode. > > > > Maybe Magnus has

Re: [HACKERS] libpq and sslmode=require

2008-11-04 Thread Magnus Hagander
Peter Eisentraut wrote: > Bruce Momjian wrote: >> In testing an SSL patch, I found that if I use 'sslmode=require' in the >> libpq connection string, it does not use SSL over a unix-domain socket. >> >> libpq should either use SSL (which I don't think it can), or error out, >> or we should at least

Re: [HACKERS] libpq and sslmode=require

2008-11-04 Thread Bruce Momjian
Peter Eisentraut wrote: > Bruce Momjian wrote: > > In testing an SSL patch, I found that if I use 'sslmode=require' in the > > libpq connection string, it does not use SSL over a unix-domain socket. > > > > libpq should either use SSL (which I don't think it can), or error out, > > or we should at

Re: [HACKERS] libpq and sslmode=require

2008-11-04 Thread Tom Lane
Bruce Momjian <[EMAIL PROTECTED]> writes: > In testing an SSL patch, I found that if I use 'sslmode=require' in the > libpq connection string, it does not use SSL over a unix-domain socket. It's always done that. regards, tom lane -- Sent via pgsql-hackers mailing list (

Re: [HACKERS] libpq and sslmode=require

2008-11-04 Thread Peter Eisentraut
Bruce Momjian wrote: In testing an SSL patch, I found that if I use 'sslmode=require' in the libpq connection string, it does not use SSL over a unix-domain socket. libpq should either use SSL (which I don't think it can), or error out, or we should at least document this behavior. We discusse