Re: Update minimum SSL version

Daniel Gustafsson <daniel@yesql.se>

From: Daniel Gustafsson <daniel@yesql.se>

To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>

Cc: pgsql-hackers <pgsql-hackers@postgresql.org>

Date: 2019-11-29T10:10:32Z

Lists: pgsql-hackers

> On 29 Nov 2019, at 08:36, Peter Eisentraut <peter.eisentraut@2ndquadrant.com> wrote:
> 
> I propose to change the default of ssl_min_protocol_version to TLSv1.2 (from TLSv1, which means 1.0).  Older versions would still be supported, just not by default.

+1 for having a sane default with a way to fall back to older versions in case
they are required.

cheers ./daniel

Commits

Fix handling of OpenSSL's SSL_clear_options
- 7ad544fd8e45 11.7 landed
- 902276ff1309 12.2 landed
- 7d0bcb047717 13.0 landed
Remove configure check for OpenSSL's SSL_get_current_compression()
- 28f4bba66b57 13.0 landed
Update minimum SSL version
- b1abfec82547 13.0 landed