diff options
| author | Peter Eisentraut <peter_e@gmx.net> | 2018-01-27 13:47:52 -0500 |
|---|---|---|
| committer | Peter Eisentraut <peter_e@gmx.net> | 2018-01-30 22:56:24 -0500 |
| commit | f75a95915528646cbfaf238fb48b3ffa17969383 (patch) | |
| tree | 39ae8490eadc1b2c965b569be2e43abe77ca1c49 /src/include/executor/nodeSubplan.h | |
| parent | 38d485fdaa5739627b642303cc172acc1487b90a (diff) | |
Refactor client-side SSL certificate checking code
Separate the parts specific to the SSL library from the general logic.
The previous code structure was
open_client_SSL()
calls verify_peer_name_matches_certificate()
calls verify_peer_name_matches_certificate_name()
calls wildcard_certificate_match()
and was completely in fe-secure-openssl.c. The new structure is
open_client_SSL() [openssl]
calls pq_verify_peer_name_matches_certificate() [generic]
calls pgtls_verify_peer_name_matches_certificate_guts() [openssl]
calls openssl_verify_peer_name_matches_certificate_name() [openssl]
calls pq_verify_peer_name_matches_certificate_name() [generic]
calls wildcard_certificate_match() [generic]
Move the generic functions into a new file fe-secure-common.c, so the
calls generally go fe-connect.c -> fe-secure.c -> fe-secure-${impl}.c ->
fe-secure-common.c, although there is a bit of back-and-forth between
the last two.
Reviewed-by: Michael Paquier <michael.paquier@gmail.com>
Diffstat (limited to 'src/include/executor/nodeSubplan.h')
0 files changed, 0 insertions, 0 deletions