[HACKERS] IPv6 patch

2002-12-28 Thread Bruce Momjian
I have been working on a patch to implement IPv6 connections. A working patch was supplied by Nigel Kukard about two weeks ago, and I have been improving it. The original patch assumed the system has IPv6 functions, like getaddrinfo(), so the major work was patching it into our existing code that

[HACKERS] Bad download link

2002-12-28 Thread David Walker
Trying to download 7.3.1 today I found a bad link on http://www.us.postgresql.org/sitess.html The ftp link goes to 7.3 and the http link returns a 404 not found. I did successfully download 7.3.1 via the HTTP access to the main repository link. ---(end of broadcast)-

[HACKERS] SSL sessions

2002-12-28 Thread Bear Giles
On other quick note - when we were discussing SSL sessions earlier I remember the concensus was that database clients usually keep a connection established for relatively long times. But now I'm not so sure - what about web servers communicating to a database backend? They should use connectio

[HACKERS] next set of SSL - ideas?

2002-12-28 Thread Bear Giles
I should have some time free... and I wanted to get back to what seemed to be the most critical problem in the last cycle with the SSL code. Specifically, it's time to think about setting up a "policy" file. This puts a bit more work on the DBA, but it gives them complete flexibility in how th

Re: [HACKERS] GBorg feature requests

2002-12-28 Thread Dave Page
Hi Jeroen, You can log feature requests etc. against the gborg project on Gborg itself. As for the subject lines, I get them on the lists I use - if they're not on yours, check on the list administration page for your project. Regards, Dave. > -Original Message- > From: Jeroen T. Vermeu

Re: SSL/TLS support (Was: Re: [HACKERS] 7.3.1 stamped)

2002-12-28 Thread Bear Giles
Bruce Momjian wrote: Marc G. Fournier wrote: My suggestion would be to eventually phase out ssl2 in favor of ssl3 or tls. And, as we are phasing it out, make it an opt-in thing, where the dba has to turn on ssl2 KNOWING he is turning on a flawed protocol. That was sort of my point --- if we a