On 2019-02-22 06:28, Michael Paquier wrote: >> Is that right? Won't we then just select nothing if the macro is not >> defined? > In the context of an SSL connection, the server would send both SCRAM > and SCRAM_PLUS as valid mechanisms if it supports channel binding > (HAVE_BE_TLS_GET_CERTIFICATE_HASH). If the server does not support > channel binding, then only SCRAM is sent.
After reading it again a few more times, I think your patch is correct. I tried reproducing the issue locally, but the required OpenSSL version is too old to be easily available. -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
