]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Warn on password auth with MD5-encrypted passwords
authorFujii Masao <fujii@postgresql.org>
Wed, 1 Jul 2026 11:57:28 +0000 (20:57 +0900)
committerFujii Masao <fujii@postgresql.org>
Wed, 1 Jul 2026 11:57:28 +0000 (20:57 +0900)
commitf6fdc2a4a737b62323b786aea59ab7a38cd7f835
treeb342a16f1a428b94e957961bf80b434f864b1cc4
parent30652b356d20c1d3772137370a6a8d29575e04d1
Warn on password auth with MD5-encrypted passwords

Commit bc60ee860 added a connection warning after successful MD5
authentication, but only for the md5 authentication method. A role with
an MD5-encrypted password can also authenticate via the password method,
which left that path without the same deprecation warning.

Emit the MD5 deprecation connection warning after successful
password authentication as well, when the stored password is
MD5-encrypted.

Backpatch to v19, where the MD5 connection warning was introduced.

Author: Fujii Masao <masao.fujii@gmail.com>
Reviewed-by: Chao Li <li.evan.chao@gmail.com>
Reviewed-by: Japin Li <japinli@hotmail.com>
Discussion: https://postgr.es/m/CAHGQGwGkWfn5rtHzvdRbVk+PCefQU3gun3hc7QnaMXHFa5Bu3w@mail.gmail.com
Backpatch-through: 19
doc/src/sgml/config.sgml
src/backend/libpq/auth.c
src/backend/libpq/crypt.c
src/test/authentication/t/001_password.pl