Horton
Menu

Re: libpq compression

Tom Lane <tgl@sss.pgh.pa.us>

View thread
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Magnus Hagander <magnus@hagander.net>
Cc: Euler Taveira <euler@timbira.com>, Florian Pflug <fgp@phlo.org>, Bruce Momjian <bruce@momjian.us>, Pgsql Hackers <pgsql-hackers@postgresql.org>
Date: 2012-06-17T15:42:18Z
Lists: pgsql-hackers 
Magnus Hagander <magnus@hagander.net> writes:
> Is there a reason why we don't have a parameter on the client
> mirroring ssl_ciphers?

Dunno, do we need one?  I am not sure what the cipher negotiation process
looks like or which side has the freedom to choose.

> That, or just have DEFAULT as being the default (which in current
> openssl means ALL:!aNULL:!eNULL.

If our default isn't the same as the underlying default, I have to
question why not.  But are you sure this "!" notation will work with
all openssl versions?

			regards, tom lane