Re: Proposal: Supporting URI SAN in Certificate Authentication

From: Agustín Martínez Fayó <amartinezfayo(at)gmail(dot)com>
To: Florin Irion <irionr(at)gmail(dot)com>
Cc: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>, olivier cano <kindermoumoute(at)gmail(dot)com>, pgsql-hackers(at)lists(dot)postgresql(dot)org, david(at)pgbackrest(dot)org, gabriele(dot)bartolini(at)enterprisedb(dot)com
Subject: Re: Proposal: Supporting URI SAN in Certificate Authentication
Date: 2026-10-13 21:57:40
Message-ID: CAJcBgCfC5XxEOps+=BTZ=G4mpN-XZxHobG7PFV59_piZdNc9ng@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, Oct 6, 2026 at 3:12 AM Florin Irion <irionr(at)gmail(dot)com> wrote:
> Thanks for the detailed review and the SPIFFE perspective. v3 addresses all of it

Thanks Florin. I applied v3 on current master, re-ran the SSL TAP suite
and the embedded-null certificate, and all the changes look good to me,
including the documentation. From the SPIFFE side, I think v3 is in
good shape.

Thank you again for working on this integration. I'm excited to see it
coming together and look forward to seeing it land.

Regards,
Agustín

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Heikki Linnakangas 2026-10-13 22:02:37 pg_upgrade fails with a config-only datadir and no --new-bindir
Previous Message Peter Smith 2026-10-13 21:49:52 Re: Proposal: Conflict log history table for Logical Replication