Horton

Re: Add support to TLS 1.3 cipher suites and curves lists

Daniel Gustafsson <daniel@yesql.se>

View thread View on postgr.es
From: Daniel Gustafsson <daniel@yesql.se>
To: Dmitry Dolgov <9erthalion6@gmail.com>
Cc: Jacob Champion <jacob.champion@enterprisedb.com>, Peter Eisentraut <peter@eisentraut.org>, Erica Zhang <ericazhangy2021@qq.com>, Andres Freund <andres@anarazel.de>, Jelte Fennema-Nio <postgres@jeltef.nl>, pgsql-hackers <pgsql-hackers@lists.postgresql.org>
Date: 2026-02-23T13:22:53Z
Lists: pgsql-hackers 
> On 19 Feb 2026, at 12:56, Dmitry Dolgov <9erthalion6@gmail.com> wrote:

> Unless I'm missing something, that means pre 18 version cannot use
> post-quantum schemes, which have become a part of standard recently. The
> last such version goes out of support in 2029. I know it's a long shot,
> but with that in mind are there any chances of backporting this change set?

The API has been available since OpenSSL 1.1.1 so it would be Ok from that
perspective, but we don't backport non-bugfix changes that change/add
functionality.  In this case it's changing functionalty in a dependency and not
postgres itself, but I think it falls on the same rule.

--
Daniel Gustafsson

Commits

  1. Handle alphanumeric characters in matching GUC names

  2. Only perform pg_strong_random init when required