Re: Client certificate authentication

From: Alvaro Herrera <alvherre(at)commandprompt(dot)com>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: Alex Hunsaker <badalex(at)gmail(dot)com>, PG Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Client certificate authentication
Date: 2008-11-17 12:31:23
Message-ID: 20081117123123.GF4291@alvh.no-ip.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Magnus Hagander escribió:
> On 16 nov 2008, at 01.00, "Alex Hunsaker" <badalex(at)gmail(dot)com> wrote:

>> My only concern is there is no way to specify the USER_CERT_FILE for
>> libpq. So if for example I have two users that I want to use cert
>> authentication for I really have to have to users on the system (or i
>> guess maybe you could fake HOME=... psql -U other_user). Or am I
>
> While not directly related to this patch, that is a very good point. We
> have PGSSLKEY but not PGSSLCERT. Could certainly be worth adding.

FWIW I think this was part of the patch submitted by Mark Woodward; see
http://wiki.postgresql.org/wiki/CommitFest_2008-07, and
http://archives.postgresql.org/message-id/20080801203157.GL4321@alvh.no-ip.org

--
Alvaro Herrera http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Magnus Hagander 2008-11-17 12:39:09 Re: Client certificate authentication
Previous Message Merlin Moncure 2008-11-17 12:27:59 Re: xmlconcat as variadic function