Re: Contrib module to examine client certificate

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: "Victor B(dot) Wagner" <vitus(at)cryptocom(dot)ru>
Cc: pgsql-patches(at)postgresql(dot)org
Subject: Re: Contrib module to examine client certificate
Date: 2006-09-02 02:37:34
Message-ID: 200609020237.k822bY716359@momjian.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches


I assume this is something we want in /contrib, right?

---------------------------------------------------------------------------

Victor B. Wagner wrote:
> Following patch provides new contrib module pgsslinfo, which contains
> several server-side functions, which allow to examine information about
> SSL client certificate, used to connect to the server.
>
> This information can be used for example, for logging user access.
>
> Textual information from certificate distninguished name is converted
> into current database charset, which allow non-latin characters in the
> names to be readable.
>
> Module was developed using latest stable version of OpenSSL (0.9.8b).
> Probably, it should work with previous stable version of OpenSSL
> (0.9.7something) which is still widely used, or even with outdated
> version 0.9.6, but I haven't tested it.
>
> Module requires access to PostgreSQL variable MyProcPort, which is not
> declared DLLIMPORT in the appropriate header file (miscadmin.h).
> So, this patch includes one-line patch to this header file, to allow
> module compile and work under win32.
>
>

[ Attachment, skipping... ]

>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: Have you checked our extensive FAQ?
>
> http://www.postgresql.org/docs/faq

--
Bruce Momjian bruce(at)momjian(dot)us
EnterpriseDB http://www.enterprisedb.com

+ If your life is a hard drive, Christ can be your backup. +

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2006-09-02 02:43:08 pgsql: Suppress some NOTICE messages from REINDEX command.
Previous Message Tom Lane 2006-09-02 02:34:32 GetSnapshotData never needs exclusive lock on ProcArrayLock

Browse pgsql-patches by date

  From Date Subject
Next Message Tom Lane 2006-09-02 02:46:22 Re: Proposed patch for rules with RETURNING
Previous Message Bruce Momjian 2006-09-02 02:34:55 Re: Patch for PLPYTHONU - adding TD["relname"]