Add:

> > * Allow client certificate names to be checked against the client > hostname > > This is already implemented in > libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code > is commented out.

Add:
> > * Allow client certificate names to be checked against the client > hostname > > This is already implemented in > libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code > is commented out.
38ade59f · Bruce Momjian · 2b70548b · 38ade59f · 38ade59f
Commit 38ade59f authored Mar 06, 2008 by Bruce Momjian
Hide whitespace changes
Inline Side-by-side

Showing with 15 additions and 2 deletions

doc/TODO doc/TODO +8 -1

doc/src/FAQ/TODO.html doc/src/FAQ/TODO.html +7 -1

No files found.
--- a/doc/TODO
+++ b/doc/TODO
 PostgreSQL TODO List
 ====================
 Current maintainer:	Bruce Momjian (bruce@momjian.us)
-Last updated:		Thu Mar  6 13:00:54 EST 2008
+Last updated:		Thu Mar  6 16:25:41 EST 2008

 The most recent version of this document can be viewed at
 http://www.postgresql.org/docs/faqs.TODO.html.
@@ -85,6 +85,13 @@ Administration

  http://archives.postgresql.org/pgsql-hackers/2007-12/msg00924.php

+* Allow client certificate names to be checked against the client
+  hostname
+
+  This is already implemented in
+  libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code
+  is commented out.
+
 * Configuration files

 	o Allow pg_hba.conf to specify host names along with IP addresses

--- a/doc/src/FAQ/TODO.html
+++ b/doc/src/FAQ/TODO.html
@@ -8,7 +8,7 @@
 <body bgcolor="#FFFFFF" text="#000000" link="#FF0000" vlink="#A00000" alink="#0000FF">
 <h1><a name="section_1">PostgreSQL TODO List</a></h1>
 <p>Current maintainer:     Bruce Momjian (<a href="mailto:bruce@momjian.us">bruce@momjian.us</a>)<br/>
-Last updated:           Thu Mar  6 13:00:54 EST 2008
+Last updated:           Thu Mar  6 16:25:41 EST 2008
 </p>
 <p>The most recent version of this document can be viewed at<br/>
 <a href="http://www.postgresql.org/docs/faqs.TODO.html">http://www.postgresql.org/docs/faqs.TODO.html</a>.
@@ -81,6 +81,12 @@ first.  There is also a developer's wiki at<br/>
 </p>
  </li><li>Allow SSL authentication/encryption over unix domain sockets
 <p>  <a href="http://archives.postgresql.org/pgsql-hackers/2007-12/msg00924.php">http://archives.postgresql.org/pgsql-hackers/2007-12/msg00924.php</a>
+</p>
+  </li><li>Allow client certificate names to be checked against the client
+  hostname
+<p>  This is already implemented in
+  libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code
+  is commented out.
 </p>
  </li><li>Configuration files
  <ul>