Thread

  1. SSL cipher and version

    Robert Haas <robertmhaas@gmail.com> — 2010-07-26T13:49:02Z

    Last week, I ran across a situation where I needed to know the SSL
    version and cipher in use for a particular database connection.
    Magnus pointed me to contrib/sslinfo, but that didn't have quite what
    I needed.  The attached patch adds two additional functions to
    contrib/sslinfo to report this information.
    
    Any objections to me committing this?
    
    -- 
    Robert Haas
    EnterpriseDB: http://www.enterprisedb.com
    The Enterprise Postgres Company
    
  2. Re: SSL cipher and version

    Dave Page <dpage@pgadmin.org> — 2010-07-26T13:57:54Z

    On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:
    > Last week, I ran across a situation where I needed to know the SSL
    > version and cipher in use for a particular database connection.
    > Magnus pointed me to contrib/sslinfo, but that didn't have quite what
    > I needed.  The attached patch adds two additional functions to
    > contrib/sslinfo to report this information.
    >
    > Any objections to me committing this?
    
    Might wanna fix this first:
    
    +PG_FUNCTION_INFO_V1(ssl_veresion);
                                             ^^^^^^^^^^^^
    
    -- 
    Dave Page
    EnterpriseDB UK: http://www.enterprisedb.com
    The Enterprise Postgres Company
    
    
  3. Re: SSL cipher and version

    Robert Haas <robertmhaas@gmail.com> — 2010-07-26T14:45:36Z

    On Mon, Jul 26, 2010 at 9:57 AM, Dave Page <dpage@pgadmin.org> wrote:
    > On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:
    >> Last week, I ran across a situation where I needed to know the SSL
    >> version and cipher in use for a particular database connection.
    >> Magnus pointed me to contrib/sslinfo, but that didn't have quite what
    >> I needed.  The attached patch adds two additional functions to
    >> contrib/sslinfo to report this information.
    >>
    >> Any objections to me committing this?
    >
    > Might wanna fix this first:
    >
    > +PG_FUNCTION_INFO_V1(ssl_veresion);
    >                                         ^^^^^^^^^^^^
    
    Wow.  It works remarkably well without fixing that, but I'll admit
    that does seem lucky.
    
    -- 
    Robert Haas
    EnterpriseDB: http://www.enterprisedb.com
    The Enterprise Postgres Company
    
    
  4. Re: SSL cipher and version

    Tom Lane <tgl@sss.pgh.pa.us> — 2010-07-27T04:06:49Z

    Robert Haas <robertmhaas@gmail.com> writes:
    > On Mon, Jul 26, 2010 at 9:57 AM, Dave Page <dpage@pgadmin.org> wrote:
    >> On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:
    >>> Any objections to me committing this?
    >> 
    >> Might wanna fix this first:
    >> 
    >> +PG_FUNCTION_INFO_V1(ssl_veresion);
    >>                     ^^^^^^^^^^^^
    
    > Wow.  It works remarkably well without fixing that, but I'll admit
    > that does seem lucky.
    
    Well, it's got no arguments, which is the main thing that works
    differently in call protocol V1.  I think you'd find that the
    PG_RETURN_NULL case doesn't really work though ...
    
    			regards, tom lane
    
    
  5. Re: SSL cipher and version

    Robert Haas <robertmhaas@gmail.com> — 2010-07-27T23:43:51Z

    On Tue, Jul 27, 2010 at 12:06 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
    > Robert Haas <robertmhaas@gmail.com> writes:
    >> On Mon, Jul 26, 2010 at 9:57 AM, Dave Page <dpage@pgadmin.org> wrote:
    >>> On Mon, Jul 26, 2010 at 2:49 PM, Robert Haas <robertmhaas@gmail.com> wrote:
    >>>> Any objections to me committing this?
    >>>
    >>> Might wanna fix this first:
    >>>
    >>> +PG_FUNCTION_INFO_V1(ssl_veresion);
    >>>                                         ^^^^^^^^^^^^
    >
    >> Wow.  It works remarkably well without fixing that, but I'll admit
    >> that does seem lucky.
    >
    > Well, it's got no arguments, which is the main thing that works
    > differently in call protocol V1.  I think you'd find that the
    > PG_RETURN_NULL case doesn't really work though ...
    
    It seems to work, but it might be that something's broken under the hood.
    
    Anyhow, committed with that correction.
    
    -- 
    Robert Haas
    EnterpriseDB: http://www.enterprisedb.com
    The Enterprise Postgres Company