Horton

Re: Setting min/max TLS protocol in clientside libpq

Peter Eisentraut <peter.eisentraut@2ndquadrant.com>

View thread View on postgr.es
From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Michael Paquier <michael@paquier.xyz>, Daniel Gustafsson <daniel@yesql.se>
Cc: Tom Lane <tgl@sss.pgh.pa.us>, cary huang <hcary328@gmail.com>, PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Date: 2020-04-29T20:33:26Z
Lists: pgsql-hackers 
On 2020-04-27 07:45, Michael Paquier wrote:
> On Sun, Apr 26, 2020 at 11:20:01PM +0200, Daniel Gustafsson wrote:
>> That was the preferred name by Michael too elsewhere in the thread, so went
>> ahead and made it so.
> 
> Thanks Daniel.
> 
>>> I would, however, prefer to also rename the internal symbols.
>>
>> Done in the attached v2.
> 
> What you have here looks fine to me.  Peter, what do you think?

This looks good to me, except that

xreflabel="ssl-min-protocol-version"

etc. needs to be changed to use underscores.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

Commits

  1. Rename connection parameters to control min/max SSL protocol version in libpq

  2. Add connection parameters to control SSL protocol min/max in libpq

  3. Move OpenSSL routines for min/max protocol setting to src/common/