NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commit8159664

committed

Fix pg_hba_file_rules for authentication method cert

For authentication method cert, clientcert=verify-full is implied. Butthe pg_hba_file_rules entry would incorrectly show clientcert=verify-ca.Per bug #17354Reported-By: Feike SteenbergenReviewed-By: Jonathan KatzBackpatch-through: 12

1 parent213c5aa commit8159664Copy full SHA for 8159664

File tree

1 file changed

-1

lines changed

src/backend/libpq
- hba.c

1 file changed

-1

lines changed

`‎src/backend/libpq/hba.c‎`

Lines changed: 5 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -1632,7 +1632,11 @@ parse_hba_line(TokenizedLine *tok_line, int elevel)`
`1632`	`1632`	`*/`
`1633`	`1633`	`if (parsedline->auth_method==uaCert)`
`1634`	`1634`	`{`
`1635`		`-parsedline->clientcert=clientCertCA;`
	`1635`	`+/*`
	`1636`	`+ * For auth method cert, client certificate validation is mandatory, and it implies`
	`1637`	`+ * the level of verify-full.`
	`1638`	`+ */`
	`1639`	`+parsedline->clientcert=clientCertFull;`
`1636`	`1640`	`}`
`1637`	`1641`
`1638`	`1642`	`returnparsedline;`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit8159664

File tree

1 file changed

1 file changed

`‎src/backend/libpq/hba.c‎`

0 commit comments