Contrib module to examine client certificate

From: "Victor B(dot) Wagner" <vitus(at)cryptocom(dot)ru>
To: pgsql-patches(at)postgresql(dot)org
Subject: Contrib module to examine client certificate
Date: 2006-06-06 07:51:35
Message-ID: 20060606075135.GA24460@cryptocom.ru
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches

Following patch provides new contrib module pgsslinfo, which contains
several server-side functions, which allow to examine information about
SSL client certificate, used to connect to the server.

This information can be used for example, for logging user access.

Textual information from certificate distninguished name is converted
into current database charset, which allow non-latin characters in the
names to be readable.

Module was developed using latest stable version of OpenSSL (0.9.8b).
Probably, it should work with previous stable version of OpenSSL
(0.9.7something) which is still widely used, or even with outdated
version 0.9.6, but I haven't tested it.

Module requires access to PostgreSQL variable MyProcPort, which is not
declared DLLIMPORT in the appropriate header file (miscadmin.h).
So, this patch includes one-line patch to this header file, to allow
module compile and work under win32.

Attachment Content-Type Size
pgsslinfo.diff.gz application/octet-stream 5.3 KB

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Eisentraut 2006-06-06 07:53:27 Re: Why do we want to %Remove behavior of postmaster -o
Previous Message Tom Lane 2006-06-06 03:08:37 Re: fillfactor using WITH syntax

Browse pgsql-patches by date

  From Date Subject
Next Message ITAGAKI Takahiro 2006-06-06 09:02:19 table/index fillfactor control
Previous Message Qingqing Zhou 2006-06-06 04:32:06 Re: remove lock protection on HeapTupleSatisfiesVacuum