libpq: Add support for dumping SSL key material to file
This adds a new connection parameter which instructs libpq to
write out keymaterial clientside into a file in order to make
connection debugging with Wireshark and similar tools possible.
The file format used is the standardized NSS format.
Author: Abhishek Chanda <abhishek.becs@gmail.com>
Co-authored-by: Daniel Gustafsson <daniel@yesql.se>
Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com>
Discussion: https://postgr.es/m/CAKiP-K85C8uQbzXKWf5wHQPkuygGUGcufke713iHmYWOe9q2dA@mail.gmail.com
Branch
------
master
Details
-------
https://git.postgresql.org/pg/commitdiff/2da74d8d6400975bf73fb0df97c3943ad3ed9a36
Modified Files
--------------
configure | 2 +-
configure.ac | 2 +-
doc/src/sgml/libpq.sgml | 24 +++++++++++++
meson.build | 1 +
src/include/pg_config.h.in | 3 ++
src/interfaces/libpq/fe-connect.c | 4 +++
src/interfaces/libpq/fe-secure-openssl.c | 58 ++++++++++++++++++++++++++++++++
src/interfaces/libpq/libpq-int.h | 1 +
src/test/ssl/t/001_ssltests.pl | 27 +++++++++++++++
9 files changed, 120 insertions(+), 2 deletions(-)
