Re: [PATCH] Automatic client certificate selection support for libpq v1

Поиск
Список
Период
Сортировка
От Seth Robertson
Тема Re: [PATCH] Automatic client certificate selection support for libpq v1
Дата
Msg-id 200905111636.n4BGaiCA002940@no.baka.org
обсуждение исходный текст
Ответ на Re: [PATCH] Automatic client certificate selection support for libpq v1  (Magnus Hagander <magnus@hagander.net>)
Список pgsql-hackers
In message <4A07DB89.2080508@hagander.net>, Magnus Hagander writes:
   Is NSS available on all the platforms that we are (and that has OpenSSL   today)?

NSS stopped publishing their supported platform list for NSS for some
strange reasons (older version have it).  But I'd probably assume that
the list includes AIX, Tru64, HPUX, Linux, Windows, Solaris, Mac OSX.
I specifically don't see signs that they attempt to support the *BSD
platforms, but the *BSD people have working ports.

Generally from almost dozens of minutes of googling, I'd have to say
that in terms of portability and declared actual ports:

OpenSSL >> PostgreSQL >> Mozilla NSS >> GnuTLS

GnuTLS doesn't seem to be as mature as either OpenSSL and Mozilla NSS,
at least in my current hot-button issue of client certificate
validation.

Good luck with that Windows SChannel thing...I didn't find any
opensource program which uses it.
                -Seth Robertson                 in-pgsql-hackers@baka.org


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Magnus Hagander
Дата:
Сообщение: Re: SSL cert chains patch
Следующее
От: Seth Robertson
Дата:
Сообщение: Re: [PATCH] Automatic client certificate selection support for libpq v1