summaryrefslogtreecommitdiff
path: root/src/interfaces/libpq/fe-secure.c
AgeCommit message (Expand)Author
2014-08-11Break out OpenSSL-specific code to separate files.Heikki Linnakangas
2014-05-06pgindent run for 9.4Bruce Momjian
2014-01-31Disallow use of SSL v3 protocol in the server as well as in libpq.Tom Lane
2014-01-24libpq: Support TLS versions beyond TLSv1.Noah Misch
2014-01-07Update copyright for 2014Bruce Momjian
2013-09-23Fix SSL deadlock risk in libpqStephen Frost
2013-08-17libpq: Report strerror on pthread_mutex_lock() failurePeter Eisentraut
2013-08-01Improve handling of pthread_mutex_lock error caseStephen Frost
2013-08-01Add locking around SSL_context usage in libpqStephen Frost
2013-07-23Check for NULL result from strdupAlvaro Herrera
2013-03-17Move pqsignal() to libpgport.Tom Lane
2013-01-01Update copyrights for 2013Bruce Momjian
2012-06-10Run pgindent on 9.2 source tree in preparation for first 9.3Bruce Momjian
2012-02-23Remove arbitrary limitation on length of common name in SSL certificates.Tom Lane
2012-01-01Update copyright notices for year 2012.Bruce Momjian
2011-12-03Treat ENOTDIR as ENOENT when looking for client certificate fileMagnus Hagander
2011-11-28Add libpq connection option to disable SSL compressionMagnus Hagander
2011-07-24Fix previous patch so it also works if not USE_SSL (mea culpa).Tom Lane
2011-07-24Improve libpq's error reporting for SSL failures.Tom Lane
2011-07-24Use OpenSSL's SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER flag.Tom Lane
2011-04-10pgindent run before PG 9.1 beta 1.Bruce Momjian
2011-03-04In initialize_SSL, don't fail unnecessarily when home dir is unavailable.Tom Lane
2011-01-01Stamp copyrights for year 2011.Bruce Momjian
2010-09-20Remove cvs keywords from all files.Magnus Hagander
2010-07-14Allow full SSL certificate verification (wherein libpq checks its host nameTom Lane
2010-07-06pgindent run for 9.0, second runBruce Momjian
2010-05-26Rearrange libpq's SSL initialization to simplify it and make it handle someTom Lane
2010-05-25Add missing newlines to some SSL-related error messages. Noted while testing.Tom Lane
2010-02-26pgindent run for 9.0Bruce Momjian
2010-01-02Update copyright for the year 2010.Bruce Momjian
2009-12-30Set errno to zero before invoking SSL_read or SSL_write. It appears thatTom Lane
2009-12-09Reject certificates with embedded NULLs in the commonName field. This stopsMagnus Hagander
2009-07-24Avoid extra system calls to block SIGPIPE if the platform provides eitherTom Lane
2009-06-23Properly initialize SSL engines when used from libpq. This is required forMagnus Hagander
2009-06-118.4 pgindent run, with new combined Linux/FreeBSD/MinGW typedef listBruce Momjian
2009-05-03Fix already-obsolete hint message ... sslverify parameter is no more.Tom Lane
2009-04-24Remove sslverify parameter again, replacing it with two new sslmode values:Magnus Hagander
2009-04-14Add libpq error message text on how to handle missing root.crt file.Bruce Momjian
2009-03-31Add PQinitOpenSSL() function to support applications that use libcryptoTom Lane
2009-03-28Clarify variable naming: pq_initssllib -> pq_init_ssl_libBruce Momjian
2009-03-28Better document PQinitSSL(0) behavior in regards to libcrypto.Bruce Momjian
2009-01-28Go over all OpenSSL return values and make sure we compare themMagnus Hagander
2009-01-19Fix accidental (I suppose) introduction of non-ASCII quote marks.Tom Lane
2009-01-19Message wordsmithingPeter Eisentraut
2009-01-07Don't require pqGetHomeDirectory to succeed if the user has specifiedMagnus Hagander
2009-01-01Update copyright for 2009.Bruce Momjian
2008-12-15Support specifying filename for SSL certificate, key, root certificate storeMagnus Hagander
2008-12-04Comment said we don't free the lockarray, and why. The proper fix is toMagnus Hagander
2008-12-04Fix typo in recent SSL unload patch.Bruce Momjian
2008-12-03Properly unregister OpenSSL callbacks when libpq is done withMagnus Hagander