Re: Recent vendor SSL renegotiation patches break PostgreSQL
Robert Haas <robertmhaas@gmail.com>
From: Robert Haas <robertmhaas@gmail.com>
To: Chris Campbell <chris_campbell@mac.com>
Cc: pgsql-hackers@postgresql.org
Date: 2010-02-03T15:03:45Z
Lists: pgsql-hackers
On Wed, Feb 3, 2010 at 6:24 AM, Chris Campbell <chris_campbell@mac.com> wrote: > The flurry of patches that vendors have recently been making to OpenSSL to address > the potential man-in-the-middle attack during SSL renegotiation have disabled SSL > renegotiation altogether in the OpenSSL libraries. Applications that make use of SSL > renegotiation, such as PostgreSQL, start failing. Should we think about adding a GUC to disable renegotiation until this blows over? ...Robert