On 3/27/26 20:20, olivier cano wrote:
Proposal: Allow certificate authentication to use URI SAN entries as the
client identity (e.g. via a clientname=uri option in pg_hba.conf), in
addition to the existing CN/DN options.
Questions:
* Is there interest in this feature from the community?
This was recently requested for the pgBackRest project [1] so there does
seem to be some interest from users, at least.
The user decided to fallback to using CNs since Postgres support does
not seem like it will happen soon and we are unlikely to add it in
pgBackRest until it is supported by Postgres.
Regards,
-David
[1] https://github.com/pgbackrest/pgbackrest/issues/2765
