OSDN Git Service

SSL patch that adds support for optional client certificates.
authorBruce Momjian <bruce@momjian.us>
Fri, 14 Jun 2002 04:36:58 +0000 (04:36 +0000)
committerBruce Momjian <bruce@momjian.us>
Fri, 14 Jun 2002 04:36:58 +0000 (04:36 +0000)
commiteb7afc1407680a10be05ba18865051b539d434f2
tree0bad774049d392555e255f2221d8ffd3e11939da
parentb8b6691e5262ade0d863cada0d67d85fad668fd0
SSL patch that adds support for optional client certificates.

If the user has certificates in $HOME/.postgresql/postgresql.crt
and $HOME/.postgresql/postgresql.key exist, they are provided
to the server.  The certificate used to sign this cert must be
known to the server, in $DataDir/root.crt.  If successful, the
cert's "common name" is logged.

Client certs are not used for authentication, but they could be
via the port->peer (X509 *), port->peer_dn (char *) or
port->peer_cn (char *) fields.  Or any other function could be
used, e.g., many sites like the issuer + serial number hash.

Bear Giles
src/backend/libpq/be-secure.c
src/include/libpq/libpq-be.h
src/interfaces/libpq/fe-secure.c