Re: [PATCH] add ssl_protocols configuration option

Dag-Erling Smørgrav <des@des.no>

From: Dag-Erling Smørgrav <des@des.no>
To: Alex Shulgin <ash@commandprompt.com>
Cc: pgsql-hackers@postgresql.org
Date: 2014-11-20T08:41:52Z
Lists: pgsql-hackers
Alex Shulgin <ash@commandprompt.com> writes:
> * The patch works as advertised, though the only way to verify that
>   connections made with the protocol disabled by the GUC are indeed
>   rejected is to edit fe-secure-openssl.c to only allow specific TLS
>   versions.  Adding configuration on the libpq side as suggested in the
>   original discussion might help here.

I can easily do that, but I won't have time until next week or so.

DES
-- 
Dag-Erling Smørgrav - des@des.no