Horton
Menu

Re: Recent vendor SSL renegotiation patches break PostgreSQL

Tom Lane <tgl@sss.pgh.pa.us>

View thread
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Chris Campbell <chris_campbell@mac.com>, pgsql-hackers@postgresql.org
Date: 2010-02-03T15:21:25Z
Lists: pgsql-hackers 
Robert Haas <robertmhaas@gmail.com> writes:
> Should we think about adding a GUC to disable renegotiation until this
> blows over?

Bad idea: once set, it'll never get unset, thus leaving installations
with a weakened security posture even after they've installed fixed
versions of openssl.

			regards, tom lane