Add notBefore and notAfter to SSL cert info display
authorDaniel Gustafsson <dgustafsson@postgresql.org>
Thu, 20 Jul 2023 15:07:32 +0000 (17:07 +0200)
committerDaniel Gustafsson <dgustafsson@postgresql.org>
Thu, 20 Jul 2023 15:07:32 +0000 (17:07 +0200)
commit75ec5e7bec700577d39d653c316e3ae6c505842c
treeef80345f4dd87eaa35745fafb11a7efe808b6c8a
parent40fad96530caf190a3babf322ca705e744c393bb
Add notBefore and notAfter to SSL cert info display

This adds the X509 attributes notBefore and notAfter to sslinfo
as well as pg_stat_ssl to allow verifying and identifying the
validity period of the current client certificate.

Author: Cary Huang <cary.huang@highgo.ca>
Discussion: https://postgr.es/m/182b8565486.10af1a86f158715.2387262617218380588@highgo.ca
18 files changed:
contrib/sslinfo/Makefile
contrib/sslinfo/meson.build
contrib/sslinfo/sslinfo--1.2--1.3.sql [new file with mode: 0644]
contrib/sslinfo/sslinfo.c
contrib/sslinfo/sslinfo.control
doc/src/sgml/monitoring.sgml
doc/src/sgml/sslinfo.sgml
src/backend/catalog/system_views.sql
src/backend/libpq/be-secure-openssl.c
src/backend/utils/activity/backend_status.c
src/backend/utils/adt/pgstatfuncs.c
src/include/catalog/catversion.h
src/include/catalog/pg_proc.dat
src/include/libpq/libpq-be.h
src/include/utils/backend_status.h
src/test/regress/expected/rules.out
src/test/ssl/t/001_ssltests.pl
src/test/ssl/t/003_sslinfo.pl