more verbose SSL session info for psql

[Bear Giles <bgiles(at)coyotesong(dot)com>]

This is a small patch - many people (including myself) believe that
all encrypted channels should always clearly communicate to the user
the identity and session parameters of the connection.  This allows
the user to decide whether to abort a connection if they find something
unexpected and unacceptable.

This patch only affects psql, and merely replaces

  SSL connection
  (cipher: DES-CBC3-SHA, bits 168)

with the moderately more useful

  encrypted connection to eris.example.com
  Chaos and Despair, Unlimited.
  Turmoil Division
  (cipher: DES-CBC3-SHA, bits 168)

(Specifically, the "common name", "organization name" and
"organizational unit name" fields of the server's cert.)

Before anyone else points it out, anyone can put anything they want
into their own self-signed cert.  So the value of this is limited
until there's either a trusted local root cert store (like what
web browsers use) or a trusted PKIX infrastructure.  But it's better
than nothing if you routinely connect to multiple servers, and it
will get people used to seeing the information.

Bear

Attachment: diff
Description: /tmp/diff