]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Warn upon successful MD5 password authentication.
authorNathan Bossart <nathan@postgresql.org>
Mon, 23 Feb 2026 17:22:04 +0000 (11:22 -0600)
committerNathan Bossart <nathan@postgresql.org>
Mon, 23 Feb 2026 17:22:04 +0000 (11:22 -0600)
commitbc60ee86066520ee0f86abd3d47bb8ab9757842f
treef5fd6b211d3521c2424356eff5e18bd6f696a284
parent797872f6b9c929a78677999c323ddc1ccb4e30d0
Warn upon successful MD5 password authentication.

This uses the "connection warning" infrastructure introduced by
commit 1d92e0c2cc to emit a WARNING when an MD5 password is used to
authenticate.  MD5 password support was marked as deprecated in
v18 and will be removed in a future release of Postgres.  These
warnings are on by default but can be turned off via the existing
md5_password_warnings parameter.

Reviewed-by: Andreas Karlsson <andreas@proxel.se>
Reviewed-by: Xiangyu Liang <liangxiangyu_2013@163.com>
Discussion: https://postgr.es/m/aYzeAYEbodkkg5e-%40nathan
doc/src/sgml/config.sgml
src/backend/libpq/crypt.c
src/test/authentication/t/001_password.pl