pg.ddx.io  pgsql-committers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Daniel Gustafsson <dgustafsson@postgresql.org>
To: pgsql-committers@lists.postgresql.org
Subject: pgsql: Add notBefore and notAfter to SSL cert info display
Date: Thu, 20 Jul 2023 15:10:21 +0000
Message-ID: <E1qMVIK-000SkH-Ee@gemulon.postgresql.org> (raw)

Add notBefore and notAfter to SSL cert info display

This adds the X509 attributes notBefore and notAfter to sslinfo
as well as pg_stat_ssl to allow verifying and identifying the
validity period of the current client certificate.

Author: Cary Huang <cary.huang@highgo.ca>
Discussion: https://postgr.es/m/182b8565486.10af1a86f158715.2387262617218380588@highgo.ca

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/75ec5e7bec700577d39d653c316e3ae6c505842c

Modified Files
--------------
contrib/sslinfo/Makefile                    |  2 +-
contrib/sslinfo/meson.build                 |  1 +
contrib/sslinfo/sslinfo--1.2--1.3.sql       | 12 ++++++
contrib/sslinfo/sslinfo.c                   | 67 +++++++++++++++++++++++++++++
contrib/sslinfo/sslinfo.control             |  2 +-
doc/src/sgml/monitoring.sgml                | 20 +++++++++
doc/src/sgml/sslinfo.sgml                   | 30 +++++++++++++
src/backend/catalog/system_views.sql        |  4 +-
src/backend/libpq/be-secure-openssl.c       | 47 ++++++++++++++++++++
src/backend/utils/activity/backend_status.c |  2 +
src/backend/utils/adt/pgstatfuncs.c         | 46 ++++++++++++--------
src/include/catalog/catversion.h            |  2 +-
src/include/catalog/pg_proc.dat             |  6 +--
src/include/libpq/libpq-be.h                |  2 +
src/include/utils/backend_status.h          |  2 +
src/test/regress/expected/rules.out         | 12 +++---
src/test/ssl/t/001_ssltests.pl              |  8 ++--
src/test/ssl/t/003_sslinfo.pl               | 14 ++++++
18 files changed, 246 insertions(+), 33 deletions(-)



view thread (6+ messages)  latest in thread

Message-ID: <E1qMVIK-000SkH-Ee@gemulon.postgresql.org>
Permalink:  ../E1qMVIK-000SkH-Ee@gemulon.postgresql.org/
Also on:    postgresql.org/message-id/E1qMVIK-000SkH-Ee@gemulon.postgresql.org

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-committers@postgresql.org
  Cc: dgustafsson@postgresql.org, pgsql-committers@lists.postgresql.org
  Subject: Re: pgsql: Add notBefore and notAfter to SSL cert info display
  In-Reply-To: <E1qMVIK-000SkH-Ee@gemulon.postgresql.org>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox