]> granicus.if.org Git - postgresql/commit
Add ssl_passphrase_command setting
authorPeter Eisentraut <peter_e@gmx.net>
Mon, 26 Feb 2018 18:28:38 +0000 (13:28 -0500)
committerPeter Eisentraut <peter_e@gmx.net>
Sat, 17 Mar 2018 12:28:51 +0000 (08:28 -0400)
commit8a3d9425290ff5f6434990349886afae9e1c6008
tree47dd8b09381f019eba35cd060d8af8f93af44c01
parent7a50bb690b4837d29e715293c156cff2fc72885c
Add ssl_passphrase_command setting

This allows specifying an external command for prompting for or
otherwise obtaining passphrases for SSL key files.  This is useful
because in many cases there is no TTY easily available during service
startup.

Also add a setting ssl_passphrase_command_supports_reload, which allows
supporting SSL configuration reload even if SSL files need passphrases.

Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
13 files changed:
doc/src/sgml/config.sgml
src/backend/libpq/Makefile
src/backend/libpq/be-secure-common.c [new file with mode: 0644]
src/backend/libpq/be-secure-openssl.c
src/backend/libpq/be-secure.c
src/backend/utils/misc/guc.c
src/backend/utils/misc/postgresql.conf.sample
src/include/libpq/libpq.h
src/test/ssl/Makefile
src/test/ssl/README
src/test/ssl/ssl/server-password.key [new file with mode: 0644]
src/test/ssl/t/001_ssltests.pl
src/tools/msvc/Mkvcbuild.pm