Re: [PATCH] Accept IP addresses in server certificate SANs

Jacob Champion <pchampion@vmware.com>

View thread View on postgr.es

From: Jacob Champion <pchampion@vmware.com>

To: "horikyota.ntt@gmail.com" <horikyota.ntt@gmail.com>

Cc: "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>

Date: 2022-03-17T21:55:07Z

Lists: pgsql-hackers

Attachments

since-v7.diff.txt (text/plain)
v8-0001-Move-inet_net_pton-to-src-port.patch (text/x-patch) patch v8-0001
v8-0002-libpq-allow-IP-address-SANs-in-server-certs.patch (text/x-patch) patch v8-0002
v8-0003-squash-libpq-allow-IP-address-SANs-in-server-cert.patch (text/x-patch) patch v8-0003

On Wed, 2022-03-16 at 23:49 +0000, Jacob Champion wrote:
> Thank you for the explanation -- the misunderstanding was all on my
> end. I thought you were asking me to move the check_cn assignment
> instead of copying it to the end. I agree that your suggestion is much
> clearer, and I'll make that change tomorrow.

Done in v8. Thanks again for your suggestions (and for your
perseverance when I didn't get it)!

--Jacob

Commits

libpq: Allow IP address SANs in server certificates
- c1932e542863 15.0 landed
Add SSL tests for IP addresses in certificates
- af9e18049550 15.0 landed
Make JSON path numeric literals more correct
- e26114c817b6 15.0 cited