Re: no verification of client certificate? - Mailing list pgsql-admin

From Michael Fuhr
Subject Re: no verification of client certificate?
Date
Msg-id 20070326134253.GA8871@winnie.fuhr.org
Whole thread Raw
In response to Re: no verification of client certificate?  (Ray Stell <stellr@cns.vt.edu>)
List pgsql-admin
On Mon, Mar 26, 2007 at 09:03:53AM -0400, Ray Stell wrote:
> If you don't mind, how do you use ssldump to trace a psql setup?

I usually capture the connection to a file with tcpdump and then
use ssldump to read the file.  Sometimes I use wireshark (formerly
ethereal) but it's a bit heavyweight for most of my needs.  As for
how to interpret what ssldump shows, I'd recommend reading Eric
Rescorla's _SSL and TLS_.  Rescorla wrote ssldump and used it for
many of the book's diagrams; he's also the author or co-author of
several of the relevant RFCs (e.g., RFC 4346 The Transport Layer
Security (TLS) Protocol Version 1.1).

--
Michael Fuhr

pgsql-admin by date:

Previous
From: Ray Stell
Date:
Subject: Re: no verification of client certificate?
Next
From: "Daniel Ricardo Medina"
Date:
Subject: Re: URGENT TABLE PG_SHADOW CORRUTEP