libpq: Add support for dumping SSL key material to file
authorDaniel Gustafsson <[email protected]>
Thu, 3 Apr 2025 11:16:43 +0000 (13:16 +0200)
committerDaniel Gustafsson <[email protected]>
Thu, 3 Apr 2025 11:16:43 +0000 (13:16 +0200)
commit2da74d8d6400975bf73fb0df97c3943ad3ed9a36
tree5f20eb74d2450a87985026348a8f406d438c1a6a
parente4309f73f698851a2f7d49ca5e98e3e188400891
libpq: Add support for dumping SSL key material to file

This adds a new connection parameter which instructs libpq to
write out keymaterial clientside into a file in order to make
connection debugging with Wireshark and similar tools possible.
The file format used is the standardized NSS format.

Author: Abhishek Chanda <[email protected]>
Co-authored-by: Daniel Gustafsson <[email protected]>
Reviewed-by: Jacob Champion <[email protected]>
Discussion: https://postgr.es/m/CAKiP-K85C8uQbzXKWf5wHQPkuygGUGcufke713iHmYWOe9q2dA@mail.gmail.com
configure
configure.ac
doc/src/sgml/libpq.sgml
meson.build
src/include/pg_config.h.in
src/interfaces/libpq/fe-connect.c
src/interfaces/libpq/fe-secure-openssl.c
src/interfaces/libpq/libpq-int.h
src/test/ssl/t/001_ssltests.pl