From 75ec5e7bec700577d39d653c316e3ae6c505842c Mon Sep 17 00:00:00 2001 From: Daniel Gustafsson Date: Thu, 20 Jul 2023 17:07:32 +0200 Subject: Add notBefore and notAfter to SSL cert info display This adds the X509 attributes notBefore and notAfter to sslinfo as well as pg_stat_ssl to allow verifying and identifying the validity period of the current client certificate. Author: Cary Huang Discussion: https://postgr.es/m/182b8565486.10af1a86f158715.2387262617218380588@highgo.ca --- src/include/utils/backend_status.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/include/utils/backend_status.h') diff --git a/src/include/utils/backend_status.h b/src/include/utils/backend_status.h index 77939a0aede..1e4fedb6614 100644 --- a/src/include/utils/backend_status.h +++ b/src/include/utils/backend_status.h @@ -61,6 +61,8 @@ typedef struct PgBackendSSLStatus char ssl_client_serial[NAMEDATALEN]; char ssl_issuer_dn[NAMEDATALEN]; + Timestamp ssl_not_before; + Timestamp ssl_not_after; } PgBackendSSLStatus; /* -- cgit v1.2.3