Tom, Josh, Magnus. > I can't speak to the situation on Windows either; if OpenSSL isn't > commonly used on Windows that may be a sufficient reason for supporting > GSSAPI too. I'm just unconvinced by any argument that suggests we'll > replace our SSL support with it.
I can't imagine we will either. I think we should offer users choices, within reason. > IIRC we had a gnutls patch offered, but rejected. Darn, this happened while I was offline. I would have supported it. I still think it's a good idea, pending patch quality. > > Also, last I checked OpenSSL didn't ship with Windows and Kerberos > > encryption did. > > How long ago did you check? I've been using OpenSSL on windows for many > years. Actually, it was supported just fine on Windows back when it was > added to PostgreSQL *at least*. I didn't say *available for download*, I said *ship with*. That is, does a Windows Vista Pro box from the factory come with OpenSSL on it? It does come with Microsoft SSPI, although I don't know compatibility issues. -- --Josh Josh Berkus PostgreSQL @ Sun San Francisco ---------------------------(end of broadcast)--------------------------- TIP 7: You can help support the PostgreSQL project by donating at http://www.postgresql.org/about/donate