public inbox for [email protected]
help / color / mirror / Atom feedFrom: Michael Fuhr <[email protected]>
To: Ray Stell <[email protected]>
Cc: Tom Lane <[email protected]>
Cc: [email protected]
Subject: Re: no verification of client certificate?
Date: Mon, 26 Mar 2007 08:00:04 -0600
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
<[email protected]>
On Mon, Mar 26, 2007 at 09:35:33AM -0400, Ray Stell wrote:
> Knowing how Michael traced the connection with ssldump would be
> VERY helpful.
The simple way is to run ssldump in one shell while running psql
in another:
ssldump -q port 5482 # my 8.2.3 db listens on port 5482
If I want to do more analysis I usually save the connection with
tcpdump first:
tcpdump -s0 -w dumpfile port 5482
The -s0 option is important: it tells tcpdump to capture the entire
packet.
When I'm done with psql I stop tcpdump and run ssldump over the dumpfile:
ssldump -r dumpfile -q
--
Michael Fuhr
view thread (14+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected]
Subject: Re: no verification of client certificate?
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox