Show SSL encryption information when logging connections

Expand the messages when log_connections is enabled to include the
fact that SSL is used and the SSL cipher information.

Dr. Andreas Kunert, review by Marko Kreen

diff --git a/src/backend/utils/init/postinit.c b/src/backend/utils/init/postinit.c
index db67d7471a2d7e43282e5909ca8a1c5da8ff4018..258108165fc94dc5e09312ebc50704a43a17a476 100644 (file)
--- a/src/backend/utils/init/postinit.c
+++ b/src/backend/utils/init/postinit.c
@@ -230,13 +230,31 @@ PerformAuthentication(Port *port)
        if (Log_connections)
        {
                if (am_walsender)
-                       ereport(LOG,
-                                       (errmsg("replication connection authorized: user=%s",
-                                                       port->user_name)));
+               {
+#ifdef USE_SSL
+                       if (port->ssl)
+                               ereport(LOG,
+                                               (errmsg("replication connection authorized: user=%s SSL(protocol: %s, cipher: %s) enabled",
+                                                               port->user_name, SSL_get_version(port->ssl), SSL_get_cipher(port->ssl))));
+                       else
+#endif
+                               ereport(LOG,
+                                               (errmsg("replication connection authorized: user=%s",
+                                                               port->user_name)));
+               }
                else
-                       ereport(LOG,
-                                       (errmsg("connection authorized: user=%s database=%s",
-                                                       port->user_name, port->database_name)));
+               {
+#ifdef USE_SSL
+                       if (port->ssl)
+                               ereport(LOG,
+                                               (errmsg("connection authorized: user=%s database=%s SSL(protocol: %s, cipher: %s) enabled",
+                                                               port->user_name, port->database_name, SSL_get_version(port->ssl), SSL_get_cipher(port->ssl))));
+                       else
+#endif
+                               ereport(LOG,
+                                               (errmsg("connection authorized: user=%s database=%s",
+                                                               port->user_name, port->database_name)));
+               }
        }
 
        set_ps_display("startup", false);