Re: [PATCH] Accept IP addresses in server certificate SANs

Jacob Champion <pchampion@vmware.com>

View thread View on postgr.es

From: Jacob Champion <pchampion@vmware.com>

To: "horikyota.ntt@gmail.com" <horikyota.ntt@gmail.com>

Cc: "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>

Date: 2022-03-15T23:24:08Z

Lists: pgsql-hackers

Attachments

since-v6.diff.txt (text/plain)
v7-0001-Move-inet_net_pton-to-src-port.patch (text/x-patch) patch v7-0001
v7-0002-libpq-allow-IP-address-SANs-in-server-certs.patch (text/x-patch) patch v7-0002
v7-0003-squash-libpq-allow-IP-address-SANs-in-server-cert.patch (text/x-patch) patch v7-0003

On Tue, 2022-03-15 at 21:41 +0000, Jacob Champion wrote:
> Sounds good. I'll work on adding tests for the current behavior, and if
> the committers don't like it, we can change it.

Done in v7, attached.

--Jacob

Commits

libpq: Allow IP address SANs in server certificates
- c1932e542863 15.0 landed
Add SSL tests for IP addresses in certificates
- af9e18049550 15.0 landed
Make JSON path numeric literals more correct
- e26114c817b6 15.0 cited