pgsql: Provide a TLS init hook

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Provide a TLS init hook
Date: 2020-03-25 21:32:18
Message-ID: E1jHDdK-0002YP-15@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

Provide a TLS init hook

The default hook function sets the default password callback function.
In order to allow preloaded libraries to have an opportunity to override
the default, TLS initialization if now delayed slightly until after
shared preloaded libraries have been loaded.

A test module is provided which contains a trivial example that decodes
an obfuscated password for an SSL certificate.

Author: Andrew Dunstan
Reviewed By: Andreas Karlsson, Asaba Takanori
Discussion: https://postgr.es/m/04116472-818b-5859-1d74-3d995aab2252@2ndQuadrant.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/896fcdb230e729652d37270c8606ccdc45212f0d

Modified Files
--------------
src/backend/libpq/be-secure-openssl.c | 48 +++++++-----
src/backend/postmaster/postmaster.c | 22 +++---
src/include/libpq/libpq-be.h | 4 +
src/test/modules/Makefile | 5 ++
.../modules/ssl_passphrase_callback/.gitignore | 1 +
src/test/modules/ssl_passphrase_callback/Makefile | 24 ++++++
.../modules/ssl_passphrase_callback/server.crt | 19 +++++
.../modules/ssl_passphrase_callback/server.key | 30 ++++++++
.../ssl_passphrase_callback/ssl_passphrase_func.c | 88 ++++++++++++++++++++++
.../ssl_passphrase_callback/t/001_testfunc.pl | 80 ++++++++++++++++++++
src/tools/msvc/Mkvcbuild.pm | 2 +-
11 files changed, 292 insertions(+), 31 deletions(-)

Responses

Browse pgsql-committers by date

  From Date Subject
Next Message Tom Lane 2020-03-25 22:01:16 Re: pgsql: Provide a TLS init hook
Previous Message Alvaro Herrera 2020-03-25 18:18:43 pgsql: pg_dump new test: Change order of arguments

Browse pgsql-hackers by date

  From Date Subject
Next Message Jeff Davis 2020-03-25 21:43:43 Re: AllocSetEstimateChunkSpace()
Previous Message Andres Freund 2020-03-25 21:18:25 Re: plan cache overhead on plpgsql expression