Re: Adding support for SSLKEYLOGFILE in the frontend - Mailing list pgsql-hackers

From Jacob Champion
Subject Re: Adding support for SSLKEYLOGFILE in the frontend
Date
Msg-id CAOYmi+=5GyBKpu7bU4D_xkAnYJTj=rMzGaUvHO99-DpNG_YKcw@mail.gmail.com
Whole thread Raw
In response to Re: Adding support for SSLKEYLOGFILE in the frontend  (Daniel Gustafsson <daniel@yesql.se>)
Responses Re: Adding support for SSLKEYLOGFILE in the frontend
List pgsql-hackers
Hello,

On Thu, Apr 3, 2025 at 8:51 AM Daniel Gustafsson <daniel@yesql.se> wrote:
> Committed, after another round of testing and looking.

I think we may want to consider marking sslkeylogfile as a debug
option (that is, opt->dispchar = "D") in fe-connect.c. Besides being a
true "debug option", this would also prevent a relatively unprivileged
user of postgres_fdw or dblink from logging the backend connection's
keys. WDYT?

--Jacob



pgsql-hackers by date:

Previous
From: Sami Imseih
Date:
Subject: Re: n_ins_since_vacuum stats for aborted transactions
Next
From: Daniel Gustafsson
Date:
Subject: Re: Adding support for SSLKEYLOGFILE in the frontend