Horton

Add notBefore and notAfter to SSL cert info display

Daniel Gustafsson <dgustafsson@postgresql.org>

View on postgr.es
Commit: 75ec5e7bec700577d39d653c316e3ae6c505842c
Author: Daniel Gustafsson <dgustafsson@postgresql.org>
Date: 2023-07-20T15:07:32Z
Releases: 17.0 
Add notBefore and notAfter to SSL cert info display

This adds the X509 attributes notBefore and notAfter to sslinfo
as well as pg_stat_ssl to allow verifying and identifying the
validity period of the current client certificate.

Author: Cary Huang <cary.huang@highgo.ca>
Discussion: https://postgr.es/m/182b8565486.10af1a86f158715.2387262617218380588@highgo.ca

Files

PathChange+/−
contrib/sslinfo/Makefile modified +1 −1
contrib/sslinfo/meson.build modified +1 −0
contrib/sslinfo/sslinfo--1.2--1.3.sql added +12 −0
contrib/sslinfo/sslinfo.c modified +67 −0
contrib/sslinfo/sslinfo.control modified +1 −1
doc/src/sgml/monitoring.sgml modified +20 −0
doc/src/sgml/sslinfo.sgml modified +30 −0
src/backend/catalog/system_views.sql modified +3 −1
src/backend/libpq/be-secure-openssl.c modified +47 −0
src/backend/utils/activity/backend_status.c modified +2 −0
src/backend/utils/adt/pgstatfuncs.c modified +29 −17
src/include/catalog/catversion.h modified +1 −1
src/include/catalog/pg_proc.dat modified +3 −3
src/include/libpq/libpq-be.h modified +2 −0
src/include/utils/backend_status.h modified +2 −0
src/test/regress/expected/rules.out modified +7 −5
src/test/ssl/t/001_ssltests.pl modified +4 −4
src/test/ssl/t/003_sslinfo.pl modified +14 −0

Documentation touched

Discussion