Re: ssl connections to postgresql - Mailing list pgsql-general

From James B. Byrne
Subject Re: ssl connections to postgresql
Date
Msg-id 37606.216.185.71.30.1185455941.squirrel@webmail.harte-lyne.ca
Whole thread Raw
In response to Re: ssl connections to postgresql  ("Albe Laurenz" <all@adv.magwien.gv.at>)
Responses Re: ssl connections to postgresql
List pgsql-general
On Wed, July 25, 2007 03:13, Albe Laurenz wrote:
> James B. Byrne wrote:
>>
>> I would like to verify that the connection between these
>> two machines is indeed employing ssl for the application in question.
>
> If you set log_min_messages and log_min_error_statement to debug5,
> you will get something like this in your log:
>
> 2007-07-04 10:20:24.348 CEST [unknown]@ (468b5848.48e:0@[unknown]) LOG:
> connection received: host=10.153.13.5 port=48360
> 2007-07-04 10:20:24.348 CEST @ (:@) DEBUG:  forked new backend, pid=1166
> socket=7
> 2007-07-04 10:20:24.420 CEST [unknown]@10.153.13.5(48360)
> (468b5848.48e:0@[unknown]) DEBUG:  SSL connection from "(anonymous)"
> 2007-07-04 10:20:24.421 CEST erich@10.153.13.5(48360)
> (468b5848.48e:0@typo3) DEBUG:  received password packet
> 2007-07-04 10:20:24.421 CEST erich@10.153.13.5(48360)
> (468b5848.48e:0@typo3) LOG:  connection authorized: user=erich
> database=typo3
>
> Yours,
> Laurenz Albe
>

Thank you.  I infer that this setting would generate an awful lot of log
entries regarding a wide range of process actions and that your intention
is that it only be used temporarily to confirm a valid ssl configuration
works as expected.  I was actually hoping to find some way of logging the
type of connection made without having to get excessive (for my purpose)
details about other activities in unrelated ares of the server process.
But, this is nonetheless valuable information. Thanks.

Regards,

--
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:ByrneJB@Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3


pgsql-general by date:

Previous
From: Geoffrey
Date:
Subject: Re: upgrade to 8.2.? or implement Slony, which first?
Next
From: "James B. Byrne"
Date:
Subject: Re: ssl connections to postgresql