[pgpool-hackers: 2991] Re: New feature: supporting SCRAM and CERT based authentication in Pgpool-II

Jesper Pedersen jesper.pedersen at redhat.com
Fri Aug 24 20:41:15 JST 2018


On 08/23/2018 11:58 PM, Tatsuo Ishii wrote:
>>> The goal is to have SCRAM-SHA256 with SSL client certificate
>>> authentication in the entire stack: client <-> pgpool <-> PostgreSQL.
> I am a little bit confused. In my understanding SSL certificate
> authentication does not require password authentication including
> SCRAM auth.

It doesn't with

hostssl all all all cert clientcert=1

However, I require clients to always use SCRAM in my setup; with / 
without SSL.

Best regards,

More information about the pgpool-hackers mailing list