patroni

2,494 Commits 15 Branches 66 Tags

2 Commits

Author	SHA1	Message	Date
Jonathan S. KatzandGitHub	accba93cbe	Add support for encrypted TLS keys for REST API (#1825 ) The Python SSL library allows for the inclusion of a password in its "load_cert_chain" function when setting up a SSLContext[1]. This allows for loading an encrypted key file in PEM representation to be loaded into the certificate chain. This commit adds the optional "keyfile_password" parameter to the REST API block of configuration so that Patroni can load in encrypted private keys when establishing its TLS socket. This also adds the corollary "PATRONI_RESTAPI_KEYFILE_PASSWORD" environmental variable, which has the same effect. [1] https://docs.python.org/3/library/ssl.html#ssl.SSLContext.load_cert_chain	2021-02-02 11:47:09 +01:00
Jonathan S. KatzandAlexander Kukushkin	a88704e792	Allow for certificate-based authentication from Patroni PostgreSQL accounts (#1134 ) The two principal features this introduces: 1. Provide the Patroni PostgreSQL management accounts (superuser, replication, rewind) to be able to authenticate using certificate-based authentication 2. Allow the user to specify the `sslmode` they wish to connect as. ### References - [PostgreSQL Certificate Based Authentication](https://www.postgresql.org/docs/current/auth-cert.html) - [libpq connection parameters](https://www.postgresql.org/docs/current/libpq-connect.html) which are used by psycopg2 - [SSL Modes](https://www.postgresql.org/docs/current/libpq-ssl.html)	2019-09-17 12:14:49 +02:00

Author

SHA1

Message

Date

Jonathan S. KatzandGitHub

accba93cbe

Add support for encrypted TLS keys for REST API (#1825 )

The Python SSL library allows for the inclusion of a password in its "load_cert_chain" function when setting up a SSLContext[1].
This allows for loading an encrypted key file in PEM representation to be loaded into the certificate chain.

This commit adds the optional "keyfile_password" parameter to the REST API block of configuration so that Patroni can load in encrypted private keys when establishing its TLS socket.

This also adds the corollary "PATRONI_RESTAPI_KEYFILE_PASSWORD" environmental variable, which has the same effect.

[1] https://docs.python.org/3/library/ssl.html#ssl.SSLContext.load_cert_chain

2021-02-02 11:47:09 +01:00

Jonathan S. KatzandAlexander Kukushkin

a88704e792

Allow for certificate-based authentication from Patroni PostgreSQL accounts (#1134 )

The two principal features this introduces:

1. Provide the Patroni PostgreSQL management accounts (superuser, replication, rewind) to be able to authenticate using certificate-based authentication
2. Allow the user to specify the `sslmode` they wish to connect as.

### References
- [PostgreSQL Certificate Based Authentication](https://www.postgresql.org/docs/current/auth-cert.html)
- [libpq connection parameters](https://www.postgresql.org/docs/current/libpq-connect.html) which are used by psycopg2
- [SSL Modes](https://www.postgresql.org/docs/current/libpq-ssl.html)

2019-09-17 12:14:49 +02:00