Re: [HACKERS] [Patch] Log SSL certificate verification errors

On 11 Nov 2017, at 6:23 AM, Michael Paquier wrote: >> Currently neither the server side nor the client side SSL certificate verify >> callback does anything, leading to potential hair-tearing-out moments. >> >> The following patch to master implements logging of all certificate >> verification

[HACKERS] [Patch] Log SSL certificate verification errors

Hi all, Currently neither the server side nor the client side SSL certificate verify callback does anything, leading to potential hair-tearing-out moments. The following patch to master implements logging of all certificate verification failures, as well as (crucially) which certificates failed

[HACKERS] libpq connection strings: control over the cipher suites?

Hi all, According to the docs at https://www.postgresql.org/docs/9.5/static/libpq-connect.html#LIBPQ-CONNSTRING there are various parameters that control ssl from the client side, including providing the ssl certs, keys, etc. Is there a parameter or mechanism for setting the required ssl ciphe

[HACKERS] postgresql v9.5 and SSL: LOG: could not accept SSL connection: tlsv1 alert unknown ca

Hi all, I have a working postgresql v9.3 installation running on out-of-the-box Ubuntu Trusty, and it works fine. The job at hand: replace the server with postgresql v9.5 on out-of-the-box Ubuntu Xenial, but this does not work fine. I am getting the problem described on this page: http://www.po