pg_stat_ssl additions

From: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
To: pgsql-hackers(at)postgresql(dot)org
Subject: pg_stat_ssl additions
Date: 2018-10-17 22:05:15
Message-ID: 398754d8-6bb5-c5cf-e7b8-22e5f0983caf@2ndquadrant.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

During discussions of alternative SSL implementations, contrib/sslinfo
is usually mentioned as something that something needs to be done about.
I've looked into adapting some functionality from sslinfo into the
pg_stat_ssl view. These two facilities have a lot of overlap but seem
mostly oblivious to each other.

The attached patch series

- Adds a documentation link from sslinfo to pg_stat_ssl.

- Adds tests under src/test/ssl/ for the pg_stat_ssl view.

- Changes pg_stat_ssl.clientdn to be null if there is no client
certificate (as documented, but not implemented). (bug fix)

- Adds new fields to pg_stat_ssl: issuerdn and clientserial. These
allow uniquely identifying the client certificate. AFAICT, these are
the most interesting pieces of information provided by sslinfo but not
in pg_stat_ssl. (I don't like the underscore-free naming of these
fields, but it matches the existing "clientdn".)

--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

Attachment Content-Type Size
v1-0001-doc-Add-link-from-sslinfo-to-pg_stat_ssl.patch text/plain 941 bytes
v1-0002-Add-tests-for-pg_stat_ssl-system-view.patch text/plain 1.7 KB
v1-0003-Fix-pg_stat_ssl.clientdn.patch text/plain 1.7 KB
v1-0004-Add-more-columns-to-pg_stat_ssl.patch text/plain 13.9 KB

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Thomas Munro 2018-10-17 22:08:33 Re: DSM robustness failure (was Re: Peripatus/failures)
Previous Message Andres Freund 2018-10-17 21:51:06 Re: Large writable variables