On 02/21/12 17:27, Alex Peshkoff wrote:
I've decided to commit wire crypt without crypt level configuration
parameter for a while. Looks like final solution may depend upon disk
crypt. If we need to pass disk key over the wire, this may slightly
affect crypt level requirements.
--
On 02/21/12 17:07, Dimitry Sibiryakov wrote:
> 21.02.2012 14:01, Alex Peshkoff wrote:
>> Sometimes one may want to set crypt level for outgoing connections from
>> server...
>In this case it is enough to set "enabled" as a defaut for client side.
> Then using
> encryption will be completely
21.02.2012 14:01, Alex Peshkoff wrote:
> Sometimes one may want to set crypt level for outgoing connections from
> server...
In this case it is enough to set "enabled" as a defaut for client side. Then
using
encryption will be completely decided by server settings.
> In all other aspects sou
On 02/21/12 16:18, Dimitry Sibiryakov wrote:
> 21.02.2012 13:13, Alex Peshkoff wrote:
>> What I want to advice - should we have separate crypt level setting for
>> client and server in firebird.conf?
>Why to use on client parameter in config file at all? Client library
> always had
> problem
21.02.2012 13:13, Alex Peshkoff wrote:
> What I want to advice - should we have separate crypt level setting for
> client and server in firebird.conf?
Why to use on client parameter in config file at all? Client library always
had
problems with finding it which may lead to unexpected raw conn
I plan to have 3 levels of crypt requirement: disabled, enabled and
required. They will work as follows (on client + server):
enabled + required => crypt
enabled + enabled => crypt
enabled + disabled => raw
disabled + required => fail
disabled + disabled => raw
required + require
