Date: Mon, 26 Mar 2007 07:42:53 -0600
From: Michael Fuhr <mike@fuhr.org>
To: Ray Stell <stellr@cns.vt.edu>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, pgsql-admin@postgresql.org
Subject: Re: no verification of client certificate?
Message-ID: <20070326134253.GA8871@winnie.fuhr.org>
References: <20070323181626.GA16092@cns.vt.edu>
	<25532.1174687277@sss.pgh.pa.us>
	<20070324020434.GA18533@cns.vt.edu> <1950.1174874480@sss.pgh.pa.us>
	<20070326025713.GA5653@winnie.fuhr.org>
	<3130.1174881861@sss.pgh.pa.us>
	<20070326052125.GA6352@winnie.fuhr.org>
	<20070326130353.GA16782@cns.vt.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20070326130353.GA16782@cns.vt.edu>

On Mon, Mar 26, 2007 at 09:03:53AM -0400, Ray Stell wrote:
> If you don't mind, how do you use ssldump to trace a psql setup?

I usually capture the connection to a file with tcpdump and then
use ssldump to read the file.  Sometimes I use wireshark (formerly
ethereal) but it's a bit heavyweight for most of my needs.  As for
how to interpret what ssldump shows, I'd recommend reading Eric
Rescorla's _SSL and TLS_.  Rescorla wrote ssldump and used it for
many of the book's diagrams; he's also the author or co-author of
several of the relevant RFCs (e.g., RFC 4346 The Transport Layer
Security (TLS) Protocol Version 1.1).

-- 
Michael Fuhr