pgsql: libpq: Add support for dumping SSL key material to file

From: Daniel Gustafsson <dgustafsson(at)postgresql(dot)org>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: libpq: Add support for dumping SSL key material to file
Date: 2025-04-03 11:21:42
Message-ID: E1u0Idi-002SIB-1Z@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

libpq: Add support for dumping SSL key material to file

This adds a new connection parameter which instructs libpq to
write out keymaterial clientside into a file in order to make
connection debugging with Wireshark and similar tools possible.
The file format used is the standardized NSS format.

Author: Abhishek Chanda <abhishek(dot)becs(at)gmail(dot)com>
Co-authored-by: Daniel Gustafsson <daniel(at)yesql(dot)se>
Reviewed-by: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
Discussion: https://postgr.es/m/CAKiP-K85C8uQbzXKWf5wHQPkuygGUGcufke713iHmYWOe9q2dA@mail.gmail.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/2da74d8d6400975bf73fb0df97c3943ad3ed9a36

Modified Files
--------------
configure | 2 +-
configure.ac | 2 +-
doc/src/sgml/libpq.sgml | 24 +++++++++++++
meson.build | 1 +
src/include/pg_config.h.in | 3 ++
src/interfaces/libpq/fe-connect.c | 4 +++
src/interfaces/libpq/fe-secure-openssl.c | 58 ++++++++++++++++++++++++++++++++
src/interfaces/libpq/libpq-int.h | 1 +
src/test/ssl/t/001_ssltests.pl | 27 +++++++++++++++
9 files changed, 120 insertions(+), 2 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Daniel Gustafsson 2025-04-03 12:03:47 pgsql: Add missing declarations to pg_config.h.in
Previous Message Heikki Linnakangas 2025-04-03 10:59:00 pgsql: Add support for sorted gist index builds to btree_gist