Re: [PATCH] add ssl_protocols configuration option
Dag-Erling Smørgrav <des@des.no>
From: Dag-Erling Smørgrav <des@des.no>
To: Alex Shulgin <ash@commandprompt.com>
Cc: pgsql-hackers@postgresql.org
Date: 2014-11-20T08:41:52Z
Lists: pgsql-hackers
Alex Shulgin <ash@commandprompt.com> writes: > * The patch works as advertised, though the only way to verify that > connections made with the protocol disabled by the GUC are indeed > rejected is to edit fe-secure-openssl.c to only allow specific TLS > versions. Adding configuration on the libpq side as suggested in the > original discussion might help here. I can easily do that, but I won't have time until next week or so. DES -- Dag-Erling Smørgrav - des@des.no