Re: [HACKERS] [Patch] Log SSL certificate verification errors - Mailing list pgsql-hackers

From Laurenz Albe
Subject Re: [HACKERS] [Patch] Log SSL certificate verification errors
Date
Msg-id 1510564059.2835.8.camel@cybertec.at
Whole thread Raw
In response to [HACKERS] [Patch] Log SSL certificate verification errors  (Graham Leggett <minfrin@sharp.fm>)
List pgsql-hackers
Graham Leggett wrote:
> Currently neither the server side nor the client side SSL certificate verify
> callback does anything, leading to potential hair-tearing-out moments.
>
> The following patch to master implements logging of all certificate
> verification failures, as well as (crucially) which certificates failed to verify,
> and at what depth, so the admin can zoom in straight onto the problem without any guessing.

+1 for the idea.

I have been in this situation before, and any information that helps to
clarify what the problem is would be a great help.

Yours,
Laurenz Albe


-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

pgsql-hackers by date:

Previous
From: Konstantin Knizhnik
Date:
Subject: Re: [HACKERS] Partition-wise aggregation/grouping
Next
From: Jonathan Jacobson
Date:
Subject: Re: [HACKERS] 10beta1 sequence regression failure on sparc64