[BUGS] BUG #5559: Full SSL verification fails when hostaddr provided

2010-07-13 Thread Christopher Head
The following bug has been logged online: Bug reference: 5559 Logged by: Christopher Head Email address: chris2...@hotmail.com PostgreSQL version: 8.4.4 Operating system: Gentoo Linux i386, kernel 2.6.34 Description:Full SSL verification fails when hostaddr provided

Re: [BUGS] BUG #5559: Full SSL verification fails when hostaddr provided

2010-12-19 Thread Christopher Head
On Wed, 14 Jul 2010 18:35:55 -0400 Tom Lane wrote: > Bruce Momjian writes: > > Do the docs need any more updating? > > No doubt, but it's a bit premature to consider that while we're still > arguing whether the code needs to change more. > > regards, tom lane > Sorry to

Re: [BUGS] BUG #5559: Full SSL verification fails when hostaddr provided

2011-01-04 Thread Christopher Head
On Tue, 4 Jan 2011 19:42:38 -0500 Robert Haas wrote: > Me, too. I reread the original discussion of this topic and I'm still > a little fuzzy on it, but the issue that was under discussion seems to > be what information we pass to external auth libraries like GSSAPI or > Kerberos, given that we

[BUGS] BUG #5868: Client ignores X.509 subject alternative name

2011-02-07 Thread Christopher Head
The following bug has been logged online: Bug reference: 5868 Logged by: Christopher Head Email address: chris2...@hotmail.com PostgreSQL version: 9.0.1 Operating system: Linux amd64 Description:Client ignores X.509 subject alternative name Details: This is more of

[BUGS] BUG #5895: Ability to match more than just CN in client certificate

2011-02-20 Thread Christopher Head
The following bug has been logged online: Bug reference: 5895 Logged by: Christopher Head Email address: chris2...@hotmail.com PostgreSQL version: 9.0.3 Operating system: Linux amd64 Description:Ability to match more than just CN in client certificate Details: This

Re: [BUGS] BUG #5895: Ability to match more than just CN in client certificate

2011-03-05 Thread Christopher Head
On Thu, 3 Mar 2011 10:20:06 -0500 Robert Haas wrote: [snip] > It seems like there are a lot of possible combinations here that could > be useful, so we'd want something that allowed a fairly flexible > specification of what to match. > > Is this a problem you're interested in working on (i.e. co