public inbox for [email protected]  
help / color / mirror / Atom feed
From: Daniel Gustafsson <[email protected]>
To: [email protected]
Subject: pgsql: libpq: Add support for dumping SSL key material to file
Date: Thu, 03 Apr 2025 11:21:42 +0000
Message-ID: <[email protected]> (raw)

libpq: Add support for dumping SSL key material to file

This adds a new connection parameter which instructs libpq to
write out keymaterial clientside into a file in order to make
connection debugging with Wireshark and similar tools possible.
The file format used is the standardized NSS format.

Author: Abhishek Chanda <[email protected]>
Co-authored-by: Daniel Gustafsson <[email protected]>
Reviewed-by: Jacob Champion <[email protected]>
Discussion: https://postgr.es/m/CAKiP-K85C8uQbzXKWf5wHQPkuygGUGcufke713iHmYWOe9q2dA@mail.gmail.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/2da74d8d6400975bf73fb0df97c3943ad3ed9a36

Modified Files
--------------
configure                                |  2 +-
configure.ac                             |  2 +-
doc/src/sgml/libpq.sgml                  | 24 +++++++++++++
meson.build                              |  1 +
src/include/pg_config.h.in               |  3 ++
src/interfaces/libpq/fe-connect.c        |  4 +++
src/interfaces/libpq/fe-secure-openssl.c | 58 ++++++++++++++++++++++++++++++++
src/interfaces/libpq/libpq-int.h         |  1 +
src/test/ssl/t/001_ssltests.pl           | 27 +++++++++++++++
9 files changed, 120 insertions(+), 2 deletions(-)



reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: pgsql: libpq: Add support for dumping SSL key material to file
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox