SSL cipher and version

Started by Robert Haasover 15 years ago5 messageshackers
Jump to latest
#1Robert Haas
robertmhaas@gmail.com

Last week, I ran across a situation where I needed to know the SSL
version and cipher in use for a particular database connection.
Magnus pointed me to contrib/sslinfo, but that didn't have quite what
I needed. The attached patch adds two additional functions to
contrib/sslinfo to report this information.

Any objections to me committing this?

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise Postgres Company

Attachments:

ssl_cipher_and_version.patchapplication/octet-stream; name=ssl_cipher_and_version.patchDownload+62-0
#2Dave Page
dpage@pgadmin.org
In reply to: Robert Haas (#1)
Re: SSL cipher and version

On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:

Last week, I ran across a situation where I needed to know the SSL
version and cipher in use for a particular database connection.
Magnus pointed me to contrib/sslinfo, but that didn't have quite what
I needed.  The attached patch adds two additional functions to
contrib/sslinfo to report this information.

Any objections to me committing this?

Might wanna fix this first:

+PG_FUNCTION_INFO_V1(ssl_veresion);
^^^^^^^^^^^^

--
Dave Page
EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise Postgres Company

#3Robert Haas
robertmhaas@gmail.com
In reply to: Dave Page (#2)
Re: SSL cipher and version

On Mon, Jul 26, 2010 at 9:57 AM, Dave Page <dpage@pgadmin.org> wrote:

On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:

Last week, I ran across a situation where I needed to know the SSL
version and cipher in use for a particular database connection.
Magnus pointed me to contrib/sslinfo, but that didn't have quite what
I needed.  The attached patch adds two additional functions to
contrib/sslinfo to report this information.

Any objections to me committing this?

Might wanna fix this first:

+PG_FUNCTION_INFO_V1(ssl_veresion);
                                        ^^^^^^^^^^^^

Wow. It works remarkably well without fixing that, but I'll admit
that does seem lucky.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise Postgres Company

#4Tom Lane
tgl@sss.pgh.pa.us
In reply to: Robert Haas (#3)
Re: SSL cipher and version

Robert Haas <robertmhaas@gmail.com> writes:

On Mon, Jul 26, 2010 at 9:57 AM, Dave Page <dpage@pgadmin.org> wrote:

On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:

Any objections to me committing this?

Might wanna fix this first:

+PG_FUNCTION_INFO_V1(ssl_veresion);
� � � � � � � � � � � � � � � � � � � � ^^^^^^^^^^^^

Wow. It works remarkably well without fixing that, but I'll admit
that does seem lucky.

Well, it's got no arguments, which is the main thing that works
differently in call protocol V1. I think you'd find that the
PG_RETURN_NULL case doesn't really work though ...

regards, tom lane

#5Robert Haas
robertmhaas@gmail.com
In reply to: Tom Lane (#4)
Re: SSL cipher and version

On Tue, Jul 27, 2010 at 12:06 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:

Robert Haas <robertmhaas@gmail.com> writes:

On Mon, Jul 26, 2010 at 9:57 AM, Dave Page <dpage@pgadmin.org> wrote:

On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:

Any objections to me committing this?

Might wanna fix this first:

+PG_FUNCTION_INFO_V1(ssl_veresion);
                                        ^^^^^^^^^^^^

Wow.  It works remarkably well without fixing that, but I'll admit
that does seem lucky.

Well, it's got no arguments, which is the main thing that works
differently in call protocol V1.  I think you'd find that the
PG_RETURN_NULL case doesn't really work though ...

It seems to work, but it might be that something's broken under the hood.

Anyhow, committed with that correction.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise Postgres Company