Re: Client certificate support in Sql.pgsql?

On Wed, 6 Dec 2023 at 05:10, Chris Angelico rosuav@gmail.com wrote:

Sound good? I'll try to put together an implementation, although I'm not sure there's a viable way to add tests for it.

In working on the implementation, I'm running into some trouble with SSL connections in general. As of Pike 8.1, the pgsql module uses Shuffler (this wasn't the case in Pike 8.0, but for unrelated reasons I'm not able to build Pike 8.0 on here at the moment). Non-SSL connections are fine, but SSL ones run into a problem due to sendcmd() calling shuffle->add_source(this) early in connectloop(), before the shuffler is created down below. Can anyone confirm whether or not Pike 9.0 is able to establish SSL encrypted connections in this way?

ChrisA