summaryrefslogtreecommitdiff
path: root/src/backend/libpq
AgeCommit message (Expand)Author
2023-02-15Fix handling of SCRAM-SHA-256's channel binding with RSA-PSS certificatesMichael Paquier
2022-05-26Remove misguided SSL key file ownership check in libpq.Tom Lane
2022-03-02Allow root-owned SSL private keys in libpq, not only the backend.Tom Lane
2022-01-25Revert "graceful shutdown" changes for Windows, in back branches only.Tom Lane
2021-12-07On Windows, also call shutdown() while closing the client socket.Tom Lane
2021-12-02On Windows, close the client socket explicitly during backend shutdown.Tom Lane
2021-11-08Reject extraneous data after SSL or GSS encryption handshake.Tom Lane
2021-11-03Fix snapshot reference leak if lo_export fails.Heikki Linnakangas
2021-08-17Set type identifier on BIODaniel Gustafsson
2021-06-23Don't assume GSSAPI result strings are null-terminated.Tom Lane
2021-05-25Disallow SSL renegotiationMichael Paquier
2021-03-20Fix memory leak when rejecting bogus DH parameters.Tom Lane
2021-03-20Fix memory leak when initializing DH parameters in backendTom Lane
2021-03-16Avoid corner-case memory leak in SSL parameter processing.Tom Lane
2020-11-03Fix unportable use of getnameinfo() in pg_hba_file_rules view.Tom Lane
2020-10-15In the postmaster, rely on the signal infrastructure to block signals.Tom Lane
2019-11-13Avoid downcasing/truncation of RADIUS authentication parameters.Tom Lane
2019-11-05Avoid logging complaints about abandoned connections when using PAM.Tom Lane
2019-07-25Fix failures to ignore \r when reading Windows-style newlines.Tom Lane
2019-06-17Fix buffer overflow when parsing SCRAM verifiers in backendMichael Paquier
2019-04-23Fix detection of passwords hashed with MD5 or SCRAM-SHA-256Michael Paquier
2018-11-28Don't set PAM_RHOST for Unix sockets.Thomas Munro
2018-11-13Fix const correctness warning.Thomas Munro
2018-11-13Fix handling of HBA ldapserver with multiple hostnames.Thomas Munro
2018-11-13Fix possible buffer overrun in hba.c.Thomas Munro
2018-10-20Server-side fix for delayed NOTIFY and SIGTERM processing.Tom Lane
2018-09-08Minor cleanup/future-proofing for pg_saslprep().Tom Lane
2018-08-24Suppress uninitialized-variable warning in new SCRAM code.Tom Lane
2018-08-21Fix set of NLS translation issuesMichael Paquier
2018-08-05Remove support for tls-unique channel binding.Heikki Linnakangas
2018-06-29Make capitalization of term "OpenSSL" more consistentMichael Paquier
2018-06-08Add missing serial commasPeter Eisentraut
2018-05-21Fix unsafe usage of strerror(errno) within ereport().Tom Lane
2018-04-26Post-feature-freeze pgindent run.Tom Lane
2018-04-26Preliminary work for pgindent run.Tom Lane
2018-04-02Make be-secure-common.c more consistent for future SSL implementationsPeter Eisentraut
2018-03-29C comments: "a" <--> "an" correctionsBruce Momjian
2018-03-19Fix typo in commentMagnus Hagander
2018-03-17Add ssl_passphrase_command settingPeter Eisentraut
2018-03-15Fix more format truncation issuesPeter Eisentraut
2018-01-30Fix up references to scram-sha-256Peter Eisentraut
2018-01-26Use abstracted SSL API in server connection log messagesPeter Eisentraut
2018-01-23Extract common bits from OpenSSL implementationPeter Eisentraut
2018-01-23Move SSL API comments to header filesPeter Eisentraut
2018-01-23Move EDH support to common filesPeter Eisentraut
2018-01-19Update commentPeter Eisentraut
2018-01-05Another attempt at fixing build with various OpenSSL versionsPeter Eisentraut
2018-01-04Add missing includesPeter Eisentraut
2018-01-04Fix build with older OpenSSL versionsPeter Eisentraut
2018-01-04Implement channel binding tls-server-end-point for SCRAMPeter Eisentraut