libpq: Add support for dumping SSL key material to file

This adds a new connection parameter which instructs libpq to
write out keymaterial clientside into a file in order to make
connection debugging with Wireshark and similar tools possible.
The file format used is the standardized NSS format.

Author: Abhishek Chanda <abhishek.b...@gmail.com>
Co-authored-by: Daniel Gustafsson <dan...@yesql.se>
Reviewed-by: Jacob Champion <jacob.champ...@enterprisedb.com>
Discussion: 
https://postgr.es/m/cakip-k85c8uqbzxkwf5whqpkuyggugcufke713ihmywoe9q...@mail.gmail.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/2da74d8d6400975bf73fb0df97c3943ad3ed9a36

Modified Files
--------------
configure                                |  2 +-
configure.ac                             |  2 +-
doc/src/sgml/libpq.sgml                  | 24 +++++++++++++
meson.build                              |  1 +
src/include/pg_config.h.in               |  3 ++
src/interfaces/libpq/fe-connect.c        |  4 +++
src/interfaces/libpq/fe-secure-openssl.c | 58 ++++++++++++++++++++++++++++++++
src/interfaces/libpq/libpq-int.h         |  1 +
src/test/ssl/t/001_ssltests.pl           | 27 +++++++++++++++
9 files changed, 120 insertions(+), 2 deletions(-)

Reply via email to