more verbose SSL session info for psql

Поиск
Список
Период
Сортировка
От Bear Giles
Тема more verbose SSL session info for psql
Дата
Msg-id 200205160428.WAA26571@eris.coyotesong.com
обсуждение исходный текст
Ответы Re: more verbose SSL session info for psql  (John Gray <jgray@azuli.co.uk>)
Список pgsql-patches
This is a small patch - many people (including myself) believe that
all encrypted channels should always clearly communicate to the user
the identity and session parameters of the connection.  This allows
the user to decide whether to abort a connection if they find something
unexpected and unacceptable.

This patch only affects psql, and merely replaces

  SSL connection
  (cipher: DES-CBC3-SHA, bits 168)

with the moderately more useful

  encrypted connection to eris.example.com
  Chaos and Despair, Unlimited.
  Turmoil Division
  (cipher: DES-CBC3-SHA, bits 168)

(Specifically, the "common name", "organization name" and
"organizational unit name" fields of the server's cert.)

Before anyone else points it out, anyone can put anything they want
into their own self-signed cert.  So the value of this is limited
until there's either a trusted local root cert store (like what
web browsers use) or a trusted PKIX infrastructure.  But it's better
than nothing if you routinely connect to multiple servers, and it
will get people used to seeing the information.

Bear

Вложения

В списке pgsql-patches по дате отправления:

Предыдущее
От: Joe Conway
Дата:
Сообщение: Re: SRF patch (was Re: [HACKERS] troubleshooting pointers)
Следующее
От: John Gray
Дата:
Сообщение: Re: more verbose SSL session info for psql