pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Jacob Champion <pchampion@vmware.com>
To: peter.eisentraut@enterprisedb.com <peter.eisentraut@enterprisedb.com>
To: pgsql-hackers@postgresql.org <pgsql-hackers@postgresql.org>
Subject: Re: [PATCH] Log details for client certificate failures
Date: Thu, 5 May 2022 15:12:20 +0000
Message-ID: <7c0468dcadbc0d0c987daf9ca08c8d111948eae6.camel@vmware.com> (raw)
In-Reply-To: <290871e5-f1d9-54a8-5df4-dbd9e604c08d@enterprisedb.com>
References: <d13c4a5787c2a3f83705124f0391e0738c796751.camel@vmware.com>
	<cd03fa63-d4d9-8d3b-f9f5-13206a28d888@enterprisedb.com>
	<a922e857c4e4a073f219bc5005b862eb22255c20.camel@vmware.com>
	<290871e5-f1d9-54a8-5df4-dbd9e604c08d@enterprisedb.com>

On Wed, 2022-05-04 at 15:53 +0200, Peter Eisentraut wrote:
> Just saying that cutting it off appears to be acceptable.  A bit more
> than 63 bytes should be okay for the log.

Gotcha.

> In terms of aligning what is printed, I meant that pg_stat_ssl uses the
> issuer plus serial number to identify the certificate unambiguously.

Oh, that's a great idea. I'll do that too.

Thanks!
--Jacob


view thread (54+ messages)  latest in thread

Message-ID: <7c0468dcadbc0d0c987daf9ca08c8d111948eae6.camel@vmware.com>
Permalink:  ../7c0468dcadbc0d0c987daf9ca08c8d111948eae6.camel@vmware.com/
Also on:    postgresql.org/message-id/7c0468dcadbc0d0c987daf9ca08c8d111948eae6.camel@vmware.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: pchampion@vmware.com, peter.eisentraut@enterprisedb.com
  Subject: Re: [PATCH] Log details for client certificate failures
  In-Reply-To: <7c0468dcadbc0d0c987daf9ca08c8d111948eae6.camel@vmware.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox