Re: Proposal: Supporting URI SAN in Certificate Authentication - Mailing list pgsql-hackers

From David Steele
Subject Re: Proposal: Supporting URI SAN in Certificate Authentication
Date
Msg-id b26c1436-90e3-45a9-97e5-088e50f6e462@pgbackrest.org
Whole thread
In response to Proposal: Supporting URI SAN in Certificate Authentication  (olivier cano <kindermoumoute@gmail.com>)
List pgsql-hackers
On 3/27/26 20:20, olivier cano wrote:
> 
> Proposal: Allow certificate authentication to use URI SAN entries as the 
> client identity (e.g. via a clientname=uri option in pg_hba.conf), in 
> addition to the existing CN/DN options.
> 
> Questions:
> * Is there interest in this feature from the community?
This was recently requested for the pgBackRest project [1] so there does 
seem to be some interest from users, at least.

The user decided to fallback to using CNs since Postgres support does 
not seem like it will happen soon and we are unlikely to add it in 
pgBackRest until it is supported by Postgres.

Regards,
-David

[1] https://github.com/pgbackrest/pgbackrest/issues/2765



pgsql-hackers by date:

Previous
From: Kwangwon Seo
Date:
Subject: Re: [PATCH] Fix quotation logic for unreserved keywords in window specifications
Next
From: Bruce Momjian
Date:
Subject: Re: [PATCH] Fix typo in select for update documentation