Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert

From:	Jacob Champion <jchampion(at)timescale(dot)com>
To:	Jelte Fennema <postgres(at)jeltef(dot)nl>
Cc:	Magnus Hagander <magnus(at)hagander(dot)net>, Michael Paquier <michael(at)paquier(dot)xyz>, thomas(at)habets(dot)se, pgsql-hackers(at)postgresql(dot)org, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Bruce Momjian <bruce(at)momjian(dot)us>, Andrew Dunstan <andrew(at)dunslane(dot)net>
Subject:	Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert
Date:	2023-02-16 18:38:25
Message-ID:	CAAWbhmg5UKhaUgfJyGjqLK07xGgS8y03J9sKOZFvMEa-yG0irA@mail.gmail.com
Views:	Raw Message | Whole Thread | Download mbox | Resend email
Thread:	2021-09-06 15:42:07 from Thomas Habets <thomas(at)habets(dot)se> 📎  2021-09-06 19:47:37 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>   2021-09-06 22:21:13 from thomas(at)habets(dot)se    2021-09-07 14:16:51 from Andrew Dunstan <andrew(at)dunslane(dot)net>     2021-09-07 14:57:40 from thomas(at)habets(dot)se      2021-09-07 15:47:34 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>       2021-09-07 16:50:19 from Andrew Dunstan <andrew(at)dunslane(dot)net>        2021-09-07 16:58:44 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>         2021-09-17 16:53:58 from Greg Stark <stark(at)mit(dot)edu>          2021-09-17 18:53:02 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>           2021-09-17 21:35:58 from Greg Stark <stark(at)mit(dot)edu>            2021-09-17 23:09:49 from Cameron Murdoch <cam(at)macaroon(dot)net>             2021-09-18 10:57:05 from Thomas Habets <thomas(at)habets(dot)se>              2021-09-18 12:20:27 from Cameron Murdoch <cam(at)macaroon(dot)net>               2021-09-22 18:36:00 from Jacob Champion <pchampion(at)vmware(dot)com>                2021-09-22 18:59:13 from Andrew Dunstan <andrew(at)dunslane(dot)net>                 2021-09-22 20:12:03 from Daniel Gustafsson <daniel(at)yesql(dot)se>            2021-09-19 21:04:24 from Andrew Dunstan <andrew(at)dunslane(dot)net>         2021-09-28 01:09:11 from Bruce Momjian <bruce(at)momjian(dot)us>          2021-09-28 09:54:39 from thomas(at)habets(dot)se           2021-10-04 21:14:36 from Bruce Momjian <bruce(at)momjian(dot)us>            2022-10-25 00:03:23 from Jacob Champion <jchampion(at)timescale(dot)com> 📎             2022-10-25 11:01:57 from thomas(at)habets(dot)se              2022-10-25 14:26:41 from Andrew Dunstan <andrew(at)dunslane(dot)net>               2022-10-25 20:20:59 from Jacob Champion <jchampion(at)timescale(dot)com>                2022-10-31 23:36:16 from Jacob Champion <jchampion(at)timescale(dot)com>                 2022-11-01 12:30:06 from thomas(at)habets(dot)se                  2022-11-01 17:03:29 from Jacob Champion <jchampion(at)timescale(dot)com>                   2022-11-01 17:55:49 from Jacob Champion <jchampion(at)timescale(dot)com>                    2022-11-03 23:39:17 from Jacob Champion <jchampion(at)timescale(dot)com>                     2022-11-08 01:04:14 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                      2022-12-02 05:26:31 from Michael Paquier <michael(at)paquier(dot)xyz>                       2022-12-02 17:58:34 from Jacob Champion <jchampion(at)timescale(dot)com>                        2022-12-05 18:53:32 from Jacob Champion <jchampion(at)timescale(dot)com>                         2022-12-08 23:10:11 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                          2023-01-03 21:06:16 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                           2023-01-06 10:17:48 from Jelte Fennema <postgres(at)jeltef(dot)nl>                            2023-01-06 13:49:57 from Andrew Dunstan <andrew(at)dunslane(dot)net>                             2023-01-06 14:28:03 from Jelte Fennema <postgres(at)jeltef(dot)nl>                              2023-01-06 15:18:55 from Andrew Dunstan <andrew(at)dunslane(dot)net>                            2023-01-06 18:20:23 from Jacob Champion <jchampion(at)timescale(dot)com>                             2023-01-09 15:07:17 from Jelte Fennema <postgres(at)jeltef(dot)nl>                              2023-01-09 15:40:34 from Andrew Dunstan <andrew(at)dunslane(dot)net>                               2023-01-10 21:07:32 from Jacob Champion <jchampion(at)timescale(dot)com>                              2023-01-10 23:15:47 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                               2023-01-11 14:37:17 from Jelte Fennema <postgres(at)jeltef(dot)nl>                                2023-01-11 17:27:32 from Jacob Champion <jchampion(at)timescale(dot)com>                                 2023-01-11 18:23:23 from Magnus Hagander <magnus(at)hagander(dot)net>                                  2023-01-11 19:06:45 from Jacob Champion <jchampion(at)timescale(dot)com>                                   2023-01-11 21:58:47 from Magnus Hagander <magnus(at)hagander(dot)net>                                    2023-02-16 09:35:07 from Jelte Fennema <postgres(at)jeltef(dot)nl>                                     2023-02-16 18:38:25 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                                      2023-02-28 23:49:07 from Jacob Champion <jchampion(at)timescale(dot)com>                                       2023-03-14 18:00:27 from "Gregory Stark (as CFM)" <stark(dot)cfm(at)gmail(dot)com>                                        2023-03-14 19:20:21 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                                         2023-03-31 09:14:20 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                          2023-03-31 17:59:44 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                                           2023-04-02 20:35:57 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                            2023-04-03 19:04:50 from Jacob Champion <jchampion(at)timescale(dot)com>                                             2023-04-03 19:40:42 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                              2023-04-03 21:09:57 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                                               2023-04-05 21:27:14 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                2023-04-05 21:29:44 from Jacob Champion <jchampion(at)timescale(dot)com>                                                 2023-04-12 07:11:41 from Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com>                                                  2023-04-12 07:19:49 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                  2023-04-12 09:24:33 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                   2023-04-12 16:54:20 from Jacob Champion <jchampion(at)timescale(dot)com>                                                    2023-04-12 19:43:43 from Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com>                                                     2023-04-12 19:57:27 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                      2023-04-12 20:23:05 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                       2023-04-12 20:29:45 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                        2023-04-12 20:56:48 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                        2023-04-13 05:43:12 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                        2023-04-13 16:39:46 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                         2023-04-13 16:42:51 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                          2023-04-13 22:26:19 from Daniel Gustafsson <daniel(at)yesql(dot)se> 📎                                                           2023-04-13 22:52:20 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                            2023-04-13 23:09:55 from Daniel Gustafsson <daniel(at)yesql(dot)se> 📎                                                             2023-04-13 23:27:45 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                              2023-04-14 08:04:27 from Daniel Gustafsson <daniel(at)yesql(dot)se> 📎                                                               2023-04-14 13:51:19 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                                2023-04-14 14:20:05 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                                 2023-04-14 14:20:57 from Daniel Gustafsson <daniel(at)yesql(dot)se> 📎                                                                  2023-04-14 17:34:36 from Jacob Champion <jchampion(at)timescale(dot)com>                                                                   2023-04-14 22:36:40 from Daniel Gustafsson <daniel(at)yesql(dot)se> 📎                                                                    2023-04-17 16:20:37 from Jacob Champion <jchampion(at)timescale(dot)com>                                                                     2023-04-18 12:32:37 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                                      2023-04-21 07:55:53 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                                       2023-04-21 16:56:52 from Jacob Champion <jchampion(at)timescale(dot)com> 📎                                                                        2023-04-24 09:48:26 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                      2023-04-12 20:52:35 from Jacob Champion <jchampion(at)timescale(dot)com>                                                       2023-04-12 21:23:11 from Peter Eisentraut <peter(dot)eisentraut(at)enterprisedb(dot)com>                                                        2023-04-12 21:40:18 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>                                                         2023-04-12 21:46:01 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                          2023-04-12 23:25:05 from Daniel Gustafsson <daniel(at)yesql(dot)se>                                                           2023-04-13 01:34:09 from Greg Stark <stark(at)mit(dot)edu>              2022-10-25 20:17:05 from Jacob Champion <jchampion(at)timescale(dot)com>      2021-09-07 15:52:08 from Andrew Dunstan <andrew(at)dunslane(dot)net>       2021-09-07 16:48:27 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Lists:	pgsql-hackers

Attachment	Content-Type	Size
since-v6.diff.txt	text/plain	784 bytes
v7-0002-libpq-force-sslmode-verify-full-for-system-CAs.patch	text/x-patch	8.7 KB
v7-0001-libpq-add-sslrootcert-system-to-use-default-CAs.patch	text/x-patch	23.2 KB

In response to

• Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert at 2023-02-16 09:35:07 from Jelte Fennema

Responses

• Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert at 2023-02-28 23:49:07 from Jacob Champion

Browse pgsql-hackers by date

	From	Date	Subject
Next Message	Jacob Champion	2023-02-16 18:57:55	Re: [PoC] Let libpq reject unexpected authentication requests
Previous Message	Bharath Rupireddy	2023-02-16 18:09:00	Add WAL read stats to pg_stat_wal