Re: Client certificate authentication

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Alex Hunsaker <badalex(at)gmail(dot)com>
Cc: Alvaro Herrera <alvherre(at)commandprompt(dot)com>, PG Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Client certificate authentication
Date: 2008-11-19 19:54:16
Message-ID: 49246EE8.4040906@hagander.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Alex Hunsaker wrote:
> On Mon, Nov 17, 2008 at 05:31, Alvaro Herrera
> <alvherre(at)commandprompt(dot)com> wrote:
>> Magnus Hagander escribió:
>>> On 16 nov 2008, at 01.00, "Alex Hunsaker" <badalex(at)gmail(dot)com> wrote:
>>>> My only concern is there is no way to specify the USER_CERT_FILE for
>>>> libpq. So if for example I have two users that I want to use cert
>>>> authentication for I really have to have to users on the system (or i
>>>> guess maybe you could fake HOME=... psql -U other_user). Or am I
>>> While not directly related to this patch, that is a very good point. We
>>> have PGSSLKEY but not PGSSLCERT. Could certainly be worth adding.
>> FWIW I think this was part of the patch submitted by Mark Woodward; see
>> http://wiki.postgresql.org/wiki/CommitFest_2008-07, and
>> http://archives.postgresql.org/message-id/20080801203157.GL4321@alvh.no-ip.org
>
> Cool! I missed this one as well, too bad it does not look like it ever
> got resubmitted for this feast :(

Actually, isn't that second mail the resubmission? That just didn't go
up on the commitfest page properly?

//Magnus

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2008-11-19 20:49:10 Re: Re: [BUGS] libpq does not manage SSL callbacks properly when other libraries are involved.
Previous Message David E. Wheeler 2008-11-19 19:42:22 Re: TODO list request: FK to unique expression indexes