From 4cba1f6bbf7c8f956c95e72c43e517a56b97665b Mon Sep 17 00:00:00 2001 From: Magnus Hagander Date: Fri, 17 Jan 2014 13:27:18 +0100 Subject: [PATCH] Show SSL encryption information when logging connections Expand the messages when log_connections is enabled to include the fact that SSL is used and the SSL cipher information. Dr. Andreas Kunert, review by Marko Kreen --- src/backend/utils/init/postinit.c | 30 ++++++++++++++++++++++++------ 1 file changed, 24 insertions(+), 6 deletions(-) diff --git a/src/backend/utils/init/postinit.c b/src/backend/utils/init/postinit.c index db67d7471a2..258108165fc 100644 --- a/src/backend/utils/init/postinit.c +++ b/src/backend/utils/init/postinit.c @@ -230,13 +230,31 @@ PerformAuthentication(Port *port) if (Log_connections) { if (am_walsender) - ereport(LOG, - (errmsg("replication connection authorized: user=%s", - port->user_name))); + { +#ifdef USE_SSL + if (port->ssl) + ereport(LOG, + (errmsg("replication connection authorized: user=%s SSL(protocol: %s, cipher: %s) enabled", + port->user_name, SSL_get_version(port->ssl), SSL_get_cipher(port->ssl)))); + else +#endif + ereport(LOG, + (errmsg("replication connection authorized: user=%s", + port->user_name))); + } else - ereport(LOG, - (errmsg("connection authorized: user=%s database=%s", - port->user_name, port->database_name))); + { +#ifdef USE_SSL + if (port->ssl) + ereport(LOG, + (errmsg("connection authorized: user=%s database=%s SSL(protocol: %s, cipher: %s) enabled", + port->user_name, port->database_name, SSL_get_version(port->ssl), SSL_get_cipher(port->ssl)))); + else +#endif + ereport(LOG, + (errmsg("connection authorized: user=%s database=%s", + port->user_name, port->database_name))); + } } set_ps_display("startup", false); -- 2.30.2