Add:

>
> * Allow client certificate names to be checked against the client
>   hostname
>
>   This is already implemented in
>   libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code
>   is commented out.

diff --git a/doc/TODO b/doc/TODO
index cca5e1a1191dc6be0942804e4ad14c6687c68f41..5f95888bfbbbc6c7c6b053190817ea7c948a943c 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -1,7 +1,7 @@
 PostgreSQL TODO List
 ====================
 Current maintainer:    Bruce Momjian ([email protected])
-Last updated:      Thu Mar  6 13:00:54 EST 2008
+Last updated:      Thu Mar  6 16:25:41 EST 2008
 
 The most recent version of this document can be viewed at
 http://www.postgresql.org/docs/faqs.TODO.html.
@@ -85,6 +85,13 @@ Administration
 
   http://archives.postgresql.org/pgsql-hackers/2007-12/msg00924.php
 
+* Allow client certificate names to be checked against the client
+  hostname
+
+  This is already implemented in
+  libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code
+  is commented out.
+
 * Configuration files
 
    o Allow pg_hba.conf to specify host names along with IP addresses

diff --git a/doc/src/FAQ/TODO.html b/doc/src/FAQ/TODO.html
index bda4e8b55852fadec09981c2ac7d6917c320bd61..81c8889ae144b9d0c9ebda67c40773e09113a7d1 100644 (file)
--- a/doc/src/FAQ/TODO.html
+++ b/doc/src/FAQ/TODO.html
@@ -8,7 +8,7 @@
 
 PostgreSQL TODO List
 Current maintainer:     Bruce Momjian ([email protected])
-Last updated:           Thu Mar  6 13:00:54 EST 2008
+Last updated:           Thu Mar  6 16:25:41 EST 2008
 
 The most recent version of this document can be viewed at
 http://www.postgresql.org/docs/faqs.TODO.html.
@@ -81,6 +81,12 @@ first.  There is also a developer's wiki at
 
   Allow SSL authentication/encryption over unix domain sockets
   http://archives.postgresql.org/pgsql-hackers/2007-12/msg00924.php
+
+  Allow client certificate names to be checked against the client
+  hostname
+  This is already implemented in
+  libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code
+  is commented out.
 
   Configuration files