Re: no verification of client certificate? - Mailing list pgsql-admin

From Michael Fuhr
Subject Re: no verification of client certificate?
Date
Msg-id 20070326140004.GA9109@winnie.fuhr.org
Whole thread Raw
In response to Re: no verification of client certificate?  (Ray Stell <stellr@cns.vt.edu>)
List pgsql-admin
On Mon, Mar 26, 2007 at 09:35:33AM -0400, Ray Stell wrote:
> Knowing how Michael traced the connection with ssldump would be
> VERY helpful.

The simple way is to run ssldump in one shell while running psql
in another:

ssldump -q port 5482    # my 8.2.3 db listens on port 5482

If I want to do more analysis I usually save the connection with
tcpdump first:

tcpdump -s0 -w dumpfile port 5482

The -s0 option is important: it tells tcpdump to capture the entire
packet.

When I'm done with psql I stop tcpdump and run ssldump over the dumpfile:

ssldump -r dumpfile -q

--
Michael Fuhr

pgsql-admin by date:

Previous
From: "Daniel Ricardo Medina"
Date:
Subject: Re: URGENT TABLE PG_SHADOW CORRUTEP
Next
From: Peter Elmers
Date:
Subject: Problems with precompiled pgsql on mac