aboutsummaryrefslogtreecommitdiff
path: root/src/backend/utils/misc/guc.c
diff options
context:
space:
mode:
authorPeter Eisentraut <peter@eisentraut.org>2020-06-10 16:16:37 +0200
committerPeter Eisentraut <peter@eisentraut.org>2020-06-10 16:42:55 +0200
commitc7eab0e97e6cf1d0c136c22269c10ae11ba874c4 (patch)
tree32df35d81cd431895d80d380d55e53e8edf10244 /src/backend/utils/misc/guc.c
parent5a4ada71a8f944600c348a6e4f5feb388ba8bd37 (diff)
downloadpostgresql-c7eab0e97e6cf1d0c136c22269c10ae11ba874c4.tar.gz
postgresql-c7eab0e97e6cf1d0c136c22269c10ae11ba874c4.zip
Change default of password_encryption to scram-sha-256
Also, the legacy values on/true/yes/1 for password_encryption that mapped to md5 are removed. The only valid values are now scram-sha-256 and md5. Reviewed-by: Jonathan S. Katz <jkatz@postgresql.org> Discussion: https://www.postgresql.org/message-id/flat/d5b0ad33-7d94-bdd1-caac-43a1c782cab2%402ndquadrant.com
Diffstat (limited to 'src/backend/utils/misc/guc.c')
-rw-r--r--src/backend/utils/misc/guc.c11
1 files changed, 1 insertions, 10 deletions
diff --git a/src/backend/utils/misc/guc.c b/src/backend/utils/misc/guc.c
index 17c15348efc..28b2fc72d64 100644
--- a/src/backend/utils/misc/guc.c
+++ b/src/backend/utils/misc/guc.c
@@ -463,18 +463,9 @@ static const struct config_enum_entry plan_cache_mode_options[] = {
{NULL, 0, false}
};
-/*
- * password_encryption used to be a boolean, so accept all the likely
- * variants of "on", too. "off" used to store passwords in plaintext,
- * but we don't support that anymore.
- */
static const struct config_enum_entry password_encryption_options[] = {
{"md5", PASSWORD_TYPE_MD5, false},
{"scram-sha-256", PASSWORD_TYPE_SCRAM_SHA_256, false},
- {"on", PASSWORD_TYPE_MD5, true},
- {"true", PASSWORD_TYPE_MD5, true},
- {"yes", PASSWORD_TYPE_MD5, true},
- {"1", PASSWORD_TYPE_MD5, true},
{NULL, 0, false}
};
@@ -4733,7 +4724,7 @@ static struct config_enum ConfigureNamesEnum[] =
NULL
},
&Password_encryption,
- PASSWORD_TYPE_MD5, password_encryption_options,
+ PASSWORD_TYPE_SCRAM_SHA_256, password_encryption_options,
NULL, NULL, NULL
},