TLS checking in pgstat

Поиск
Список
Период
Сортировка
От Daniel Gustafsson
Тема TLS checking in pgstat
Дата
Msg-id B88BC38F-BBF1-4755-976E-F8418667656D@yesql.se
обсуждение исходный текст
Ответы Re: TLS checking in pgstat  (Magnus Hagander <magnus@hagander.net>)
Список pgsql-hackers
As I mentioned in [1], checking (struct Port)->ssl for NULL to determine
whether TLS is used for connection is a bit of a leaky abstraction, as that's
an OpenSSL specific struct member.  This sets the requirement that all TLS
implementations use a pointer named SSL, and that the pointer is set to NULL in
case of a failed connection, which may or may not fit.

Is there a reason to not use (struct Port)->ssl_in_use flag which tracks just
what we're looking for here?  This also maps against other parts of the
abstraction in be-secure.c which do just that.  The attached implements this.

cheers ./daniel

[1] FAB21FC8-0F62-434F-AA78-6BD9336D630A@yesql.se


Вложения

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Daniel Gustafsson
Дата:
Сообщение: Commitfest 2020-07
Следующее
От: Dilip Kumar
Дата:
Сообщение: Re: [HACKERS] Custom compression methods