Horton

Re: SSL renegotiation

Robert Haas <robertmhaas@gmail.com>

View thread View on postgr.es
From: Robert Haas <robertmhaas@gmail.com>
To: Noah Misch <noah@leadboat.com>
Cc: Alvaro Herrera <alvherre@2ndquadrant.com>, Troels Nielsen <bn.troels@gmail.com>, Pg Hackers <pgsql-hackers@postgresql.org>, Sean Chittenden <sean@chittenden.org>
Date: 2013-07-16T15:57:19Z
Lists: pgsql-hackers 
On Fri, Jul 12, 2013 at 8:51 PM, Noah Misch <noah@leadboat.com> wrote:
> On Fri, Jul 12, 2013 at 04:32:52PM -0400, Alvaro Herrera wrote:
>> Now, should we support the 0.9.6-and-earlier mechanism?  My inclination
>> is no; even RHEL 3, the oldest supported Linux distribution, uses 0.9.7
>> (Heck, even Red Hat Linux 9, released on 2003).  To see OpenSSL 0.9.6
>> you need to go back to Red Hat Linux 7.2, released on 2001 using a Linux
>> kernel 2.4.  Surely no one in their right mind would use a current
>> Postgres release on such an ancient animal.
>
> Agreed.  The OpenSSL Project last applied a security fix to 0.9.6 over eight
> years ago.  Compatibility with 0.9.6 has zero or negative value.

+1 from me as well, if any more are needed.

-- 
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

Commits

  1. Well, the discussion about SSL a bit back perked my interest and I did