Re: [PATCH] Automatic client certificate selection support for libpq v1 - Mailing list pgsql-hackers

From Seth Robertson
Subject Re: [PATCH] Automatic client certificate selection support for libpq v1
Date
Msg-id 200905111636.n4BGaiCA002940@no.baka.org
Whole thread Raw
In response to Re: [PATCH] Automatic client certificate selection support for libpq v1  (Magnus Hagander <magnus@hagander.net>)
List pgsql-hackers
In message <4A07DB89.2080508@hagander.net>, Magnus Hagander writes:
   Is NSS available on all the platforms that we are (and that has OpenSSL   today)?

NSS stopped publishing their supported platform list for NSS for some
strange reasons (older version have it).  But I'd probably assume that
the list includes AIX, Tru64, HPUX, Linux, Windows, Solaris, Mac OSX.
I specifically don't see signs that they attempt to support the *BSD
platforms, but the *BSD people have working ports.

Generally from almost dozens of minutes of googling, I'd have to say
that in terms of portability and declared actual ports:

OpenSSL >> PostgreSQL >> Mozilla NSS >> GnuTLS

GnuTLS doesn't seem to be as mature as either OpenSSL and Mozilla NSS,
at least in my current hot-button issue of client certificate
validation.

Good luck with that Windows SChannel thing...I didn't find any
opensource program which uses it.
                -Seth Robertson                 in-pgsql-hackers@baka.org


pgsql-hackers by date:

Previous
From: Magnus Hagander
Date:
Subject: Re: SSL cert chains patch
Next
From: Seth Robertson
Date:
Subject: Re: [PATCH] Automatic client certificate selection support for libpq v1