[pgpool-hackers: 2991] Re: New feature: supporting SCRAM and CERT based authentication in Pgpool-II

[Jesper Pedersen]

Hi,

On 08/23/2018 11:58 PM, Tatsuo Ishii wrote:
>>> The goal is to have SCRAM-SHA256 with SSL client certificate
>>> authentication in the entire stack: client <-> pgpool <-> PostgreSQL.
> 
> I am a little bit confused. In my understanding SSL certificate
> authentication does not require password authentication including
> SCRAM auth.
> 

It doesn't with

hostssl all all all cert clientcert=1

However, I require clients to always use SCRAM in my setup; with / 
without SSL.

Best regards,
  Jesper