Open
Description
I've only just discovered this tool but it looks really neat!
One system I'm working with uses client certs for PG authentication, so I was excited to see your README point out that the software supports the PGSSLCERT
environment variable. Diving into the implementation, it looks like it uses that file for the root CA cert, rather than the client cert. So, I'd suggest two changes:
- The root CA cert file should rather be specified with the
PGSSLROOTCERT
environment variable, and - Add support for client certificates & keys in files specified by
PGSSLCERT
andPGSSLKEY
.
The first one should be a pretty quick change but the latter one is perhaps a bit more effort. I'd be happy to work up a PR if you'd be open to adding this support?
Metadata
Metadata
Assignees
Labels
No labels