Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1ip7IB-0003Z8-L6 for pgsql-hackers@arkaria.postgresql.org; Wed, 08 Jan 2020 09:06:19 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1ip7I9-0000Nl-Oe for pgsql-hackers@arkaria.postgresql.org; Wed, 08 Jan 2020 09:06:17 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1ip7I9-0000NX-FX for pgsql-hackers@lists.postgresql.org; Wed, 08 Jan 2020 09:06:17 +0000 Received: from wout1-smtp.messagingengine.com ([64.147.123.24]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ip7I1-0003d8-Nd for pgsql-hackers@lists.postgresql.org; Wed, 08 Jan 2020 09:06:16 +0000 Received: from compute7.internal (compute7.nyi.internal [10.202.2.47]) by mailout.west.internal (Postfix) with ESMTP id 15500608; Wed, 8 Jan 2020 04:06:05 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute7.internal (MEProxy); Wed, 08 Jan 2020 04:06:05 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=D2nDkBTgSZag5ef7P0rFkVM60VTDVb0R5UmCRDBcj hc=; b=N3I7kXqfwNqGSHlxGFVF7SLNlZZFKvGIuP+xhZr0+4soiFABW4WL4hDvy Qwtkx4w6rx9Z1zMMtOwDa4ZrLTFptvk6ZxcMX+Cq9GS3DC0Vgdr/rs+2ULoeOfRd C4gPnrX5MpkJWgYzKcj4ou1opp88y3vRhg8p9/yTVfHvh4tijnt7YM6S3LHP4mdG hHRndQ+VbGEYK9LLz9gDaGmcIP8PgWJ3N2ZzONYR/DxcN0EQuCH2lh97LkeFEBbh xb6qbEZBoFQsm7R4s9Ulbj0W4xKUYJvpIiXPJ94mcdAIkaEuLGBKz+TOYWgwT9V+ 2kSuccnU9vuSbMu0yJydkY/ZWsI5g== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedufedrvdehkecutefuodetggdotefrodftvfcurf hrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjug hrpefuvfhfhfhokffffgggjggtgfesthejredttdefheenucfhrhhomheprfgvthgvrhcu gfhishgvnhhtrhgruhhtuceophgvthgvrhdrvghishgvnhhtrhgruhhtsedvnhguqhhurg gurhgrnhhtrdgtohhmqeenucffohhmrghinhepvdhnughquhgrughrrghnthdrtghomhen ucfkphepleefrddvgeefrddukeejrddugeegnecurfgrrhgrmhepmhgrihhlfhhrohhmpe hpvghtvghrrdgvihhsvghnthhrrghuthesvdhnughquhgrughrrghnthdrtghomhenucev lhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: from april.pezone.net (p5df3bb90.dip0.t-ipconnect.de [93.243.187.144]) by mail.messagingengine.com (Postfix) with ESMTPA id D3F7F30607B0; Wed, 8 Jan 2020 04:06:03 -0500 (EST) Subject: Re: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings To: Andrew Dunstan References: <20191201014857.GE2355@paquier.xyz> <1785d74f-0b96-3858-91d7-67f6d9341795@2ndQuadrant.com> Cc: PostgreSQL Hackers From: Peter Eisentraut Organization: 2ndQuadrant Message-ID: <2cf635ea-e928-314a-101a-2e3a918bd82a@2ndquadrant.com> Date: Wed, 8 Jan 2020 10:06:02 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <1785d74f-0b96-3858-91d7-67f6d9341795@2ndQuadrant.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On 2019-12-02 00:12, Andrew Dunstan wrote: > On 11/30/19 8:48 PM, Michael Paquier wrote: >> On Thu, Oct 31, 2019 at 07:54:41PM -0400, Andrew Dunstan wrote: >>> This patch achieves $SUBJECT and also provides some testing of the >>> sslpassword setting. >> The patch does not apply anymore, so a rebase is needed. As it has >> not been reviewed, I am moving it to next CF, waiting on author. > > That's OK. This patch is dependent, as it always has been, on the patch > to allow passwordless user mappings for postgres_fdw. I hope to commit > that soon, but I'd prefer some signoff from prominent hackers, as I > don't want to go too far down this road and then encounter a bunch of > objections. The prerequisite patch has been committed, so please see about getting this patch moving forward. The patch is very small, of course, but I don't understand the "bit of a hack" comment. Could you explain that? -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services