diff options
| author | Magnus Hagander <magnus@hagander.net> | 2008-10-24 12:24:35 +0000 |
|---|---|---|
| committer | Magnus Hagander <magnus@hagander.net> | 2008-10-24 12:24:35 +0000 |
| commit | 81f3e109b704f41e32d06519fbcb47ebe1497167 (patch) | |
| tree | 0dee751a3f6caed06986bf61d6cdd68cf8ec50d1 | |
| parent | f5020684dbabe60dcfb430660455c3f9851a0e63 (diff) | |
| download | postgresql-81f3e109b704f41e32d06519fbcb47ebe1497167.tar.gz postgresql-81f3e109b704f41e32d06519fbcb47ebe1497167.zip | |
Remove a "TODO-list" structure at the top of the file, referring back
to the old set of SSL patches. Hasn't been updated since, and we keep
the TODOs in the "real" TODO list, really...
| -rw-r--r-- | src/backend/libpq/be-secure.c | 28 |
1 files changed, 1 insertions, 27 deletions
diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c index d0369471762..bae9fe8464f 100644 --- a/src/backend/libpq/be-secure.c +++ b/src/backend/libpq/be-secure.c @@ -11,7 +11,7 @@ * * * IDENTIFICATION - * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.84 2008/03/31 02:43:14 tgl Exp $ + * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.85 2008/10/24 12:24:35 mha Exp $ * * Since the server static private key ($DataDir/server.key) * will normally be stored unencrypted so that the database @@ -45,32 +45,6 @@ * amounts of data are sent with the same session key, the * session keys are periodically renegotiated. * - * PATCH LEVEL - * milestone 1: fix basic coding errors - * [*] existing SSL code pulled out of existing files. - * [*] SSL_get_error() after SSL_read() and SSL_write(), - * SSL_shutdown(), default to TLSv1. - * - * milestone 2: provide endpoint authentication (server) - * [*] client verifies server cert - * [*] client verifies server hostname - * - * milestone 3: improve confidentially, support perfect forward secrecy - * [ ] use 'random' file, read from '/dev/urandom?' - * [*] emphermal DH keys, default values - * [*] periodic renegotiation - * [*] private key permissions - * - * milestone 4: provide endpoint authentication (client) - * [*] server verifies client certificates - * - * milestone 5: provide informational callbacks - * [*] provide informational callbacks - * - * other changes - * [ ] tcp-wrappers - * [ ] more informative psql - * *------------------------------------------------------------------------- */ |