Re: implement subject alternative names support for SSL connections - Mailing list pgsql-hackers

From Heikki Linnakangas
Subject Re: implement subject alternative names support for SSL connections
Date
Msg-id 53F4702F.70409@vmware.com
Whole thread Raw
In response to implement subject alternative names support for SSL connections  (Alexey Klyukin <alexk@hintbits.com>)
Responses Re: implement subject alternative names support for SSL connections
List pgsql-hackers
On 07/25/2014 07:10 PM, Alexey Klyukin wrote:
> Greetings,
>
> I'd like to propose a patch for checking subject alternative names entry in
> the SSL certificate for DNS names during SSL authentication.

Thanks! I just ran into this missing feature last week, while working on 
my SSL test suite. So +1 for having the feature.

This patch needs to be rebased over current master branch, thanks to my 
refactoring that moved all OpenSSL-specific stuff to be-secure-openssl.c.

- Heikki




pgsql-hackers by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: better atomics - v0.5
Next
From: Etsuro Fujita
Date:
Subject: Re: Compute attr_needed for child relations (was Re: inherit support for foreign tables)