-
- Downloads
Rename "scram" to "scram-sha-256" in pg_hba.conf and password_encryption.
Per discussion, plain "scram" is confusing because we actually implement SCRAM-SHA-256 rather than the original SCRAM that uses SHA-1 as the hash algorithm. If we add support for SCRAM-SHA-512 or some other mechanism in the SCRAM family in the future, that would become even more confusing. Most of the internal files and functions still use just "scram" as a shorthand for SCRMA-SHA-256, but I did change PASSWORD_TYPE_SCRAM to PASSWORD_TYPE_SCRAM_SHA_256, as that could potentially be used by 3rd party extensions that hook into the password-check hook. Michael Paquier did this in an earlier version of the SCRAM patch set already, but I didn't include that in the version that was committed. Discussion: https://www.postgresql.org/message-id/fde71ff1-5858-90c8-99a9-1c2427e7bafb@iki.fi
Showing
- doc/src/sgml/client-auth.sgml 8 additions, 7 deletionsdoc/src/sgml/client-auth.sgml
- doc/src/sgml/config.sgml 2 additions, 2 deletionsdoc/src/sgml/config.sgml
- src/backend/commands/user.c 4 additions, 4 deletionssrc/backend/commands/user.c
- src/backend/libpq/auth-scram.c 1 addition, 1 deletionsrc/backend/libpq/auth-scram.c
- src/backend/libpq/auth.c 8 additions, 8 deletionssrc/backend/libpq/auth.c
- src/backend/libpq/crypt.c 5 additions, 5 deletionssrc/backend/libpq/crypt.c
- src/backend/libpq/hba.c 2 additions, 2 deletionssrc/backend/libpq/hba.c
- src/backend/libpq/pg_hba.conf.sample 4 additions, 4 deletionssrc/backend/libpq/pg_hba.conf.sample
- src/backend/utils/misc/guc.c 1 addition, 1 deletionsrc/backend/utils/misc/guc.c
- src/bin/initdb/initdb.c 8 additions, 8 deletionssrc/bin/initdb/initdb.c
- src/include/libpq/crypt.h 1 addition, 1 deletionsrc/include/libpq/crypt.h
- src/test/authentication/t/001_password.pl 7 additions, 7 deletionssrc/test/authentication/t/001_password.pl
- src/test/authentication/t/002_saslprep.pl 2 additions, 2 deletionssrc/test/authentication/t/002_saslprep.pl
- src/test/regress/expected/password.out 4 additions, 4 deletionssrc/test/regress/expected/password.out
- src/test/regress/sql/password.sql 3 additions, 3 deletionssrc/test/regress/sql/password.sql
Loading
Please register or sign in to comment