[Pkg-postgresql-public] Bug#779683: Bug#779683: postgresql: pg_hba scripts (mis)configures for MD5 authentication

Aaron Zauner azet at azet.org
Wed Mar 4 15:53:58 UTC 2015


Hi Stephen

Stephen Frost wrote:
> 
> That's an excellent thought..  I wasn't aware of this.  Unfortunately,
> I'm not sure that we could make it the default in Debian as it requires
> server-side certificates be configured and used properly (correct?) but
> I don't see a reason to not support it and encourage its use.

Depends on the TLS ciphersuite in use. But generally; yes. If you want
an authenticated connection a server certificate will be required (could
be autogenerated though).

Aaron

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-postgresql-public/attachments/20150304/04c74c3d/attachment-0001.sig>


More information about the Pkg-postgresql-public mailing list