summaryrefslogtreecommitdiff
path: root/src/common/cipher.c
AgeCommit message (Collapse)Author
2020-12-28Revert "Add key management system" (978f869b99) & later commitsBruce Momjian
The patch needs test cases, reorganization, and cfbot testing. Technically reverts commits 5c31afc49d..e35b2bad1a (exclusive/inclusive) and 08db7c63f3..ccbe34139b. Reported-by: Tom Lane, Michael Paquier Discussion: https://postgr.es/m/E1ktAAG-0002V2-VB@gemulon.postgresql.org
2020-12-25Really fix the dummy implementations in cipher.c.Tom Lane
945083b2f wasn't enough to silence compiler warnings.
2020-12-25fix no-return function call in cipher.c from commit 978f869b99Bruce Momjian
Reported-by: buildfarm member sifaka Backpatch-through: master
2020-12-25Fix return value and const declaration from commit 978f869b99Bruce Momjian
This fixes the non-OpenSSL compile case. Reported-by: buildfarm member sifaka Backpatch-through: master
2020-12-25Add key management systemBruce Momjian
This adds a key management system that stores (currently) two data encryption keys of length 128, 192, or 256 bits. The data keys are AES256 encrypted using a key encryption key, and validated via GCM cipher mode. A command to obtain the key encryption key must be specified at initdb time, and will be run at every database server start. New parameters allow a file descriptor open to the terminal to be passed. pg_upgrade support has also been added. Discussion: https://postgr.es/m/CA+fd4k7q5o6Nc_AaX6BcYM9yqTbC6_pnH-6nSD=54Zp6NBQTCQ@mail.gmail.com Discussion: https://postgr.es/m/20201202213814.GG20285@momjian.us Author: Masahiko Sawada, me, Stephen Frost