Re: Adding support for SSLKEYLOGFILE in the frontend - Mailing list pgsql-hackers

From vignesh C
Subject Re: Adding support for SSLKEYLOGFILE in the frontend
Date
Msg-id CALDaNm3aPj=OaGM6=J4GngJc_7MocGmjB3uxtKi+x9cxcLZUyQ@mail.gmail.com
Whole thread Raw
In response to Re: Adding support for SSLKEYLOGFILE in the frontend  (Daniel Gustafsson <daniel@yesql.se>)
List pgsql-hackers
On Fri, 14 Mar 2025 at 03:38, Daniel Gustafsson <daniel@yesql.se> wrote:
>
>
>
> > On 13 Mar 2025, at 19:31, Tom Lane <tgl@sss.pgh.pa.us> wrote:
> >
> > Jacob Champion <jacob.champion@enterprisedb.com> writes:
> >> Adding the PG prefix to the envvar name addresses my collision
> >> concern, but I think Tom's comment upthread [1] was saying that we
> >> should not provide any envvar at all:
> >
> >>> I think it might be safer if we only accepted it as a connection
> >>> parameter and not via an environment variable.
> >
> >> Is the addition of the PG prefix enough to address that concern too?
> >
> > Indeed, I was advocating for *no* environment variable.  The PG prefix
> > does not comfort me.
>
> Attached is a rebased version which fixes the test failure under autoconf (I
> had missed git adding the configure file..) and Windows where the backslashes
> weren't escaped properly.  It also removes the environment variable and has
> documentation touchups.

I noticed that Peter's comments from [1] is not yet addressed. I have
changed the commitfest entry status to Waiting on Author, please
address them and update the status to Needs review.
[1] - https://www.postgresql.org/message-id/68b66b6d-cc59-44f8-bdd2-248d50055740%40eisentraut.org

Regards.
Vignesh



pgsql-hackers by date:

Previous
From: vignesh C
Date:
Subject: Re: libpq: Process buffered SSL read bytes to support records >8kB on async API
Next
From: vignesh C
Date:
Subject: Re: Doc: Move standalone backup section, mention -X argument