Magnus Hagander <magnus@hagander.net> writes:
> As an administrator, I find that you fairly often want to know what
> your current connections are actually using as SSL parameters, and
> there is currently no other way than gdb to find that out - something
> we definitely should fix.
I'm wondering whether it's such a great idea that everybody can see
everybody else's client DN. Other than that, no objection to the
concept.
> Second, I was planning to implement it by adding fields to
> PgBackendStatus and thus to BackendStatusArray, booleans directly in
> the struct and strings similar to how we track for example hostnames.
> Anybody see a problem with that?
Space in that array is at a premium, and again the client DN seems
problematic, in that it's not short and has no clear upper bound.
If you were to drop the DN from the proposed view then I'd be fine
with this.
regards, tom lane