postgres-github.git / summary / log / commit / refs

commit    993368113c432832862db29f927c206dab0c0b8a
Author:   Jacob Champion <jchampion@postgresql.org>
Date:     Mon Mar 30 21:14:45 2026 +0000

    libpq: Add oauth_ca_file option to change CAs without debugging
    
    PG18 hid the PGOAUTHCAFILE envvar behind PGOAUTHDEBUG=UNSAFE, because I
    thought that any "real" production usage of private CA certificates
    would have them added to the Curl system trust store. But there are use
    cases, such as containerized environments, that prefer to manage custom
    CA settings more granularly; some of them consider envvar configuration
    of certificates to be standard practice.
    
    Move PGOAUTHCAFILE out from under the debug flag, and add an
    oauth_ca_file option to libpq to configure trusted CAs per connection.
    
    Patch by Jonathan Gonzalez V., with some additional wordsmithing and
    test organization by me.
    
    Author: Jonathan Gonzalez V. <jonathan.abdiel@gmail.com>
    Co-authored-by: Jacob Champion <jacob.champion@enterprisedb.com>
    Reviewed-by: Zsolt Parragi <zsolt.parragi@percona.com>
    Discussion: https://postgr.es/m/16a91d02795cb991963326a902afa764e4d721db.camel%40gmail.com

[parent: bab2f27eaaad]