Add ssl_passphrase_command setting
This allows specifying an external command for prompting for or
otherwise obtaining passphrases for SSL key files. This is useful
because in many cases there is no TTY easily available during service
startup.
Also add a setting ssl_passphrase_command_supports_reload, which allows
supporting SSL configuration reload even if SSL files need passphrases.
Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
Branch
------
master
Details
-------
https://git.postgresql.org/pg/commitdiff/8a3d9425290ff5f6434990349886afae9e1c6008
Modified Files
--------------
doc/src/sgml/config.sgml | 60 +++++++++++++
src/backend/libpq/Makefile | 2 +-
src/backend/libpq/be-secure-common.c | 120 ++++++++++++++++++++++++++
src/backend/libpq/be-secure-openssl.c | 58 ++++++++++---
src/backend/libpq/be-secure.c | 2 +
src/backend/utils/misc/guc.c | 19 ++++
src/backend/utils/misc/postgresql.conf.sample | 2 +
src/include/libpq/libpq.h | 8 ++
src/test/ssl/Makefile | 5 ++
src/test/ssl/README | 3 +
src/test/ssl/ssl/server-password.key | 18 ++++
src/test/ssl/t/001_ssltests.pl | 35 ++++++--
src/tools/msvc/Mkvcbuild.pm | 1 +
13 files changed, 313 insertions(+), 20 deletions(-)