Horton

Re: settings to control SSL/TLS protocol version

Michael Paquier <michael@paquier.xyz>

View thread View on postgr.es
From: Michael Paquier <michael@paquier.xyz>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>, "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>
Date: 2018-11-06T03:08:34Z
Lists: pgsql-hackers 
On Mon, Nov 05, 2018 at 03:01:58PM -0500, Robert Haas wrote:
> +1.  Maybe it would make sense to spell 'any' as the empty string.
> Intuitively, it makes more sense to me to think about there being no
> maximum than to think about the maximum being anything.

I have looked at the code a bit yesterday and the implementation as well
as how things are handled with OpenSSL looked sane to me.  The
suggestion of using an empty string as the default instead of 'any' also
makes sense per your argument
--
Michael

Commits

  1. Add settings to control SSL/TLS protocol version