Re: ssl connections to postgresql

["James B. Byrne" <byrnejb(at)harte-lyne(dot)ca>]

On Wed, July 25, 2007 03:13, Albe Laurenz wrote:
> James B. Byrne wrote:
>>
>> I would like to verify that the connection between these
>> two machines is indeed employing ssl for the application in question.
>
> If you set log_min_messages and log_min_error_statement to debug5,
> you will get something like this in your log:
>
> 2007-07-04 10:20:24.348 CEST [unknown]@ (468b5848.48e:0(at)[unknown]) LOG:
> connection received: host=10.153.13.5 port=48360
> 2007-07-04 10:20:24.348 CEST @ (:@) DEBUG:  forked new backend, pid=1166
> socket=7
> 2007-07-04 10:20:24.420 CEST [unknown](at)10(dot)153(dot)13(dot)5(48360)
> (468b5848.48e:0(at)[unknown]) DEBUG:  SSL connection from "(anonymous)"
> 2007-07-04 10:20:24.421 CEST erich(at)10(dot)153(dot)13(dot)5(48360)
> (468b5848.48e:0(at)typo3) DEBUG:  received password packet
> 2007-07-04 10:20:24.421 CEST erich(at)10(dot)153(dot)13(dot)5(48360)
> (468b5848.48e:0(at)typo3) LOG:  connection authorized: user=erich
> database=typo3
>
> Yours,
> Laurenz Albe
>

Thank you.  I infer that this setting would generate an awful lot of log
entries regarding a wide range of process actions and that your intention
is that it only be used temporarily to confirm a valid ssl configuration
works as expected.  I was actually hoping to find some way of logging the
type of connection made without having to get excessive (for my purpose)
details about other activities in unrelated ares of the server process. 
But, this is nonetheless valuable information. Thanks.

Regards,

-- 
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:ByrneJB(at)Harte-Lyne(dot)ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3