Horton

Re: Add support to TLS 1.3 cipher suites and curves lists

Peter Eisentraut <peter@eisentraut.org>

View thread View on postgr.es
From: Peter Eisentraut <peter@eisentraut.org>
To: Erica Zhang <ericazhangy2021@qq.com>, pgsql-hackers <pgsql-hackers@lists.postgresql.org>
Date: 2024-06-07T08:55:30Z
Lists: pgsql-hackers 
On 07.06.24 08:10, Erica Zhang wrote:
> I’m a Postgres user and I’m looking into restricting the set of allowed 
> ciphers on Postgres and configure a concrete set of curves on our 
> postgres instances.

Out of curiosity, why is this needed in practice?

> Could you please help to review to see if you are interested in having 
> this change in upcoming Postgres major release(It's should be PG17)?

It would be targetting PG18 now.

Commits

  1. Support configuring TLSv1.3 cipher suites

  2. Support configuring multiple ECDH curves

  3. Raise the minimum supported OpenSSL version to 1.1.1