proxysql

Commit Graph

Author	SHA1	Message	Date
Rahim Kanji	49553cfb0b	fix: support one-sided TLS version ranges and warn on malformed input parse_tls_version() silently discarded partially-specified ranges like "TLSv1.2-" or "-TLSv1.3", leaving both min and max empty. This meant the user's intent (e.g. "at least TLSv1.2") was lost without any indication. Now one-sided ranges set the specified bound and leave the other side to libpq defaults. A bare "-" logs a proxy_warning.	1 month ago
Rahim Kanji	e68f8bb74a	refactor: simplify pgsql_servers_ssl_params schema and pre-parse TLS range - Drop ssl_capath and ssl_cipher columns (no libpq equivalents) - Pre-parse ssl_protocol_version_range into ssl_min/max_protocol_version at construction time instead of on every backend connection - Fix Servers_SslParams 3-arg delegating constructor - Update tests, docs, and all consumers (Connection, Monitor, Kill, Admin)	1 month ago
Rahim Kanji	8aa3855ba8	docs: add user documentation for pgsql_servers_ssl_params Covers table schema, column reference, ssl_protocol_version_range format (range, pin, empty default), lookup hierarchy, usage examples (basic, per-user, TLS restriction, multi-server), admin commands, and prerequisites.	1 month ago

Author

SHA1

Message

Date

Rahim Kanji

49553cfb0b

fix: support one-sided TLS version ranges and warn on malformed input

parse_tls_version() silently discarded partially-specified ranges like
"TLSv1.2-" or "-TLSv1.3", leaving both min and max empty. This meant
the user's intent (e.g. "at least TLSv1.2") was lost without any
indication. Now one-sided ranges set the specified bound and leave the
other side to libpq defaults. A bare "-" logs a proxy_warning.

Rahim Kanji

e68f8bb74a

refactor: simplify pgsql_servers_ssl_params schema and pre-parse TLS range

- Drop ssl_capath and ssl_cipher columns (no libpq equivalents)
- Pre-parse ssl_protocol_version_range into ssl_min/max_protocol_version
  at construction time instead of on every backend connection
- Fix Servers_SslParams 3-arg delegating constructor
- Update tests, docs, and all consumers (Connection, Monitor, Kill, Admin)

Rahim Kanji

8aa3855ba8

docs: add user documentation for pgsql_servers_ssl_params

Covers table schema, column reference, ssl_protocol_version_range format
(range, pin, empty default), lookup hierarchy, usage examples (basic,
per-user, TLS restriction, multi-server), admin commands, and prerequisites.

3 Commits (v3.0-lint)