mirror of
https://github.com/square/certigo.git
synced 2026-10-20 08:19:01 +00:00
Nik Unger
3a0d8c2c97
This commit modifies the psql fork to accept a `*tls.Config` when dumping TLS info. This allows us to pass the same broad cipher suite configuration that we use for other connection types, which preserves compatibility with older Go defaults. It also has the side effect of hooking up the client certificate request info callback, which means that Certigo now reports details about the expected client certificate for Postgres connections. In the future, we should eliminate our need for this fork by switching to the `pgx` package and extracting the certificates via new hooks in the `*tls.Config` struct, rather than patching this outdated fork.