Re: pgsql: Allow matching the DN of a client certificate for authentication

2021-04-01 Thread Daniel Gustafsson
> On 29 Mar 2021, at 21:50, Andrew Dunstan wrote: > > Allow matching the DN of a client certificate for authentication A small typo snuck in with this commit: diff --git a/src/test/ssl/Makefile b/src/test/ssl/Makefile index 0d6d237e7c..ecc3fe1f2e 100644 --- a/src/test/ssl/Makefile +++ b/src/tes

Re: pgsql: Allow matching the DN of a client certificate for authentication

2021-04-01 Thread Andrew Dunstan
On 3/29/21 3:50 PM, Andrew Dunstan wrote: > Allow matching the DN of a client certificate for authentication > > Currently we only recognize the Common Name (CN) of a certificate's > subject to be matched against the user name. Thus certificates with > subjects '/OU=eng/CN=fred' and '/OU=sales/CN

pgsql: Allow matching the DN of a client certificate for authentication

2021-03-29 Thread Andrew Dunstan
Allow matching the DN of a client certificate for authentication Currently we only recognize the Common Name (CN) of a certificate's subject to be matched against the user name. Thus certificates with subjects '/OU=eng/CN=fred' and '/OU=sales/CN=fred' will have the same connection rights. This pat