When I configure my PostgreSQL server to use SSL
and connect remotely, with the PostgreSQL client psql,
and specify a password,
will the password be sent over SSL?
Or is the SSL connection established after the password has been verified?
Here is how I connect:
(note that the SSL connection info message isn’t displayed until after I’ve logged in)
-bash-4.1$ psql --host myserver.mysite.com Database Username
Password for user Username:
psql (9.1.1)
SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
Type "help" for help.
Database=>
(I think the password is double md5 salted and encrypted but SSL would make me feel better.)
Yes, the entire session is using SSL, including login/password info. You can easily verify this with tcpdump.