diff options
| author | Stephen Frost <sfrost@snowman.net> | 2020-01-08 10:57:09 -0500 |
|---|---|---|
| committer | Stephen Frost <sfrost@snowman.net> | 2020-01-08 10:57:09 -0500 |
| commit | 8dd1511e39acd729020e151deb15a958300ebff5 (patch) | |
| tree | 74528f82c511b6d5c8b755c8d2d3a2070aaa8197 /src | |
| parent | 4ac8aaa36fa24639989849c8109f8b52e9544fd1 (diff) | |
| download | postgresql-8dd1511e39acd729020e151deb15a958300ebff5.tar.gz postgresql-8dd1511e39acd729020e151deb15a958300ebff5.zip | |
Improve GSSAPI Encryption startup comment in libpq
The original comment was a bit confusing, pointed out by Alvaro Herrera.
Thread: https://postgr.es/m/20191224151520.GA16435%40alvherre.pgsql
Diffstat (limited to 'src')
| -rw-r--r-- | src/interfaces/libpq/fe-connect.c | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/src/interfaces/libpq/fe-connect.c b/src/interfaces/libpq/fe-connect.c index 3bd30482ecc..89b134665bf 100644 --- a/src/interfaces/libpq/fe-connect.c +++ b/src/interfaces/libpq/fe-connect.c @@ -2800,10 +2800,12 @@ keep_going: /* We will come back to here until there is #ifdef ENABLE_GSS /* - * If GSSAPI is enabled and we have a credential cache, try to - * set it up before sending startup messages. If it's already - * operating, don't try SSL and instead just build the startup - * packet. + * If GSSAPI encryption is enabled, then call + * pg_GSS_have_cred_cache() which will return true if we can + * acquire credentials (and give us a handle to use in + * conn->gcred), and then send a packet to the server asking + * for GSSAPI Encryption (and skip past SSL negotiation and + * regular startup below). */ if (conn->try_gss && !conn->gctx) conn->try_gss = pg_GSS_have_cred_cache(&conn->gcred); |