We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 4ac8aaa commit 8dd1511Copy full SHA for 8dd1511
src/interfaces/libpq/fe-connect.c
@@ -2800,10 +2800,12 @@ PQconnectPoll(PGconn *conn)
2800
#ifdef ENABLE_GSS
2801
2802
/*
2803
- * If GSSAPI is enabled and we have a credential cache, try to
2804
- * set it up before sending startup messages. If it's already
2805
- * operating, don't try SSL and instead just build the startup
2806
- * packet.
+ * If GSSAPI encryption is enabled, then call
+ * pg_GSS_have_cred_cache() which will return true if we can
+ * acquire credentials (and give us a handle to use in
+ * conn->gcred), and then send a packet to the server asking
2807
+ * for GSSAPI Encryption (and skip past SSL negotiation and
2808
+ * regular startup below).
2809
*/
2810
if (conn->try_gss && !conn->gctx)
2811
conn->try_gss = pg_GSS_have_cred_cache(&conn->gcred);
0 commit comments