Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vFvUO-003X4Z-Uj for pgsql-hackers@arkaria.postgresql.org; Mon, 03 Nov 2025 14:24:56 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1vFvUN-004B2s-R8 for pgsql-hackers@arkaria.postgresql.org; Mon, 03 Nov 2025 14:24:54 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1vFvUN-004B1u-H8 for pgsql-hackers@lists.postgresql.org; Mon, 03 Nov 2025 14:24:54 +0000 Received: from smtp.outgoing.loopia.se ([93.188.3.37]) by makus.postgresql.org with smtp (Exim 4.96) (envelope-from ) id 1vFvUJ-005ECY-1i for pgsql-hackers@postgresql.org; Mon, 03 Nov 2025 14:24:53 +0000 Received: from s807.loopia.se (localhost [127.0.0.1]) by s807.loopia.se (Postfix) with ESMTP id 2D1E44C5979 for ; Mon, 03 Nov 2025 15:24:48 +0100 (CET) Received: from s981.loopia.se (unknown [172.22.191.6]) by s807.loopia.se (Postfix) with ESMTP id 1933C4C7D93; Mon, 03 Nov 2025 15:24:48 +0100 (CET) Received: from s473.loopia.se (unknown [172.22.191.5]) by s981.loopia.se (Postfix) with ESMTP id 166BB22B16AE; Mon, 03 Nov 2025 15:24:48 +0100 (CET) X-Virus-Scanned: amavisd-new at amavis.loopia.se X-Spam-Flag: NO X-Spam-Score: -1.2 X-Spam-Level: X-Spam-Status: No, score=-1.2 tagged_above=-999 required=6.2 tests=[ALL_TRUSTED=-1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1] autolearn=disabled Authentication-Results: s473.loopia.se (amavisd-new); dkim=pass (2048-bit key) header.d=yesql.se Received: from s980.loopia.se ([172.22.191.6]) by s473.loopia.se (s473.loopia.se [172.22.190.13]) (amavisd-new, port 10024) with UTF8LMTP id 7YBvMfNWCuWB; Mon, 3 Nov 2025 15:24:47 +0100 (CET) X-Loopia-Auth: user X-Loopia-User: daniel@yesql.se X-Loopia-Originating-IP: 89.255.232.236 Received: from smtpclient.apple (customer-89-255-232-236.stosn.net [89.255.232.236]) (Authenticated sender: daniel@yesql.se) by s980.loopia.se (Postfix) with ESMTPSA id A98F822016A1; Mon, 03 Nov 2025 15:24:47 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yesql.se; s=loopiadkim1707475645; t=1762179887; bh=YYhMz1VbGL+wcZN37wew68+7OThqd5RbGyQoL8oFT5w=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=wL3rmiwWUhggGU830eKqd3N3OYlX4yQddesk92NR1msX4Ti4jjCQUg/KZjaOW+npi 1BRhsobRCsE89ViPyxYuHLI2F3ExBWDITWLuIMEX6Hc9pD9fos8ZWo8FfbWif0RzJm S31JyknhNDUZoLvl+nnfErUXcqVWzlwU/yExLHdvpjNPl1pHP31MotCFPJIr1rd/Iv fNr5huJKODolz1q45S/78e8bWdvmfl9sFg7Sanx98F9yUEvkiIVGH9LZpbfoYiEs1V 2M6FxbycII20UvFRwF+WMYtcLzJy8nNIQMbn8ofwdeEyX84B9ObSeOz8U7uSm+a1EN 4lB3W6TraUGjQ== Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.2\)) Subject: Re: Make PGOAUTHCAFILE in libpq-oauth work out of debug mode From: Daniel Gustafsson In-Reply-To: <16a91d02795cb991963326a902afa764e4d721db.camel@gmail.com> Date: Mon, 3 Nov 2025 15:24:37 +0100 Cc: PostgreSQL Hackers Content-Transfer-Encoding: quoted-printable Message-Id: <3D82D240-1CC5-4CE6-BE30-6065B693D40C@yesql.se> References: <16a91d02795cb991963326a902afa764e4d721db.camel@gmail.com> To: "Jonathan Gonzalez V." X-Mailer: Apple Mail (2.3776.700.51.11.2) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > On 29 Oct 2025, at 20:19, Jonathan Gonzalez V. = wrote: > This patch basically remove the need of setting the = PGOAUTHDEBUG=3DUNSAFE > to be able to use PGOAUTHCAFILE. If we do allow this (IIRC we did discuss during development to allow = this but erred on the side of caution) it should probably be made into a env var = *and* connection param setting like how libpq is otherwise configured? -- Daniel Gustafsson