Re: Continuous re-validation of session credentials

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: Jakub Wartak <jakub(dot)wartak(at)enterprisedb(dot)com>
Cc: Ajit Awekar <ajitpostgres(at)gmail(dot)com>, PostgreSQL Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>, Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>, Zsolt Parragi <zsolt(dot)parragi(at)percona(dot)com>
Subject: Re: Continuous re-validation of session credentials
Date: 2026-10-22 09:52:06
Message-ID: 7F55E630-289B-46DA-A196-B488CD1ECACD@yesql.se
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> On 14 Oct 2026, at 13:28, Jakub Wartak <jakub(dot)wartak(at)enterprisedb(dot)com> wrote:

> I think the whole 005_cert_continuous_validation.pl test should be somehow
> refactored: the other ssl tests simply rely on already generated/existing CA
> and mostly nothing is generated in the tests runtime (see ../sslfiles.mk and
> somehow use sslconfig.conf (that's ncluded from postgresql.conf).

+1, any CA/cert/key/CRL used in testing should be defined in src/test/ssl/conf
and be added to sslfiles.mk such that they can be regenerated in a single pass.

--
Daniel Gustafsson

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Daniel Gustafsson 2026-10-22 10:07:41 Re: New test function replace_conf() to get rid of unlink/append pattern
Previous Message Xuneng Zhou 2026-10-22 09:44:54 The issue of seeking backward in XLogReadDetermineTimeline()