aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorMagnus Hagander <magnus@hagander.net>2014-01-17 13:27:18 +0100
committerMagnus Hagander <magnus@hagander.net>2014-01-17 13:32:31 +0100
commit4cba1f6bbf7c8f956c95e72c43e517a56b97665b (patch)
treec951e2a46d2ad7b9a40cc78a092cd849e94d6877 /src
parent9c14dd22e144a5bef9b114a7a94df97cb23c6b9b (diff)
downloadpostgresql-4cba1f6bbf7c8f956c95e72c43e517a56b97665b.tar.gz
postgresql-4cba1f6bbf7c8f956c95e72c43e517a56b97665b.zip
Show SSL encryption information when logging connections
Expand the messages when log_connections is enabled to include the fact that SSL is used and the SSL cipher information. Dr. Andreas Kunert, review by Marko Kreen
Diffstat (limited to 'src')
-rw-r--r--src/backend/utils/init/postinit.c30
1 files changed, 24 insertions, 6 deletions
diff --git a/src/backend/utils/init/postinit.c b/src/backend/utils/init/postinit.c
index db67d7471a2..258108165fc 100644
--- a/src/backend/utils/init/postinit.c
+++ b/src/backend/utils/init/postinit.c
@@ -230,13 +230,31 @@ PerformAuthentication(Port *port)
if (Log_connections)
{
if (am_walsender)
- ereport(LOG,
- (errmsg("replication connection authorized: user=%s",
- port->user_name)));
+ {
+#ifdef USE_SSL
+ if (port->ssl)
+ ereport(LOG,
+ (errmsg("replication connection authorized: user=%s SSL(protocol: %s, cipher: %s) enabled",
+ port->user_name, SSL_get_version(port->ssl), SSL_get_cipher(port->ssl))));
+ else
+#endif
+ ereport(LOG,
+ (errmsg("replication connection authorized: user=%s",
+ port->user_name)));
+ }
else
- ereport(LOG,
- (errmsg("connection authorized: user=%s database=%s",
- port->user_name, port->database_name)));
+ {
+#ifdef USE_SSL
+ if (port->ssl)
+ ereport(LOG,
+ (errmsg("connection authorized: user=%s database=%s SSL(protocol: %s, cipher: %s) enabled",
+ port->user_name, port->database_name, SSL_get_version(port->ssl), SSL_get_cipher(port->ssl))));
+ else
+#endif
+ ereport(LOG,
+ (errmsg("connection authorized: user=%s database=%s",
+ port->user_name, port->database_name)));
+ }
}
set_ps_display("startup", false);