Horton

Re: ecdh support causes unnecessary roundtrips

Jacob Champion <jacob.champion@enterprisedb.com>

View thread View on postgr.es
From: Jacob Champion <jacob.champion@enterprisedb.com>
To: Daniel Gustafsson <daniel@yesql.se>
Cc: Andres Freund <andres@anarazel.de>, PostgreSQL Hackers <pgsql-hackers@postgresql.org>, Marko Kreen <markokr@gmail.com>, Adrian Klaver <adrian.klaver@gmail.com>, Peter Eisentraut <peter_e@gmx.net>, Heikki Linnakangas <hlinnaka@iki.fi>
Date: 2025-03-13T23:31:08Z
Lists: pgsql-hackers 
On Thu, Mar 13, 2025 at 2:41 PM Daniel Gustafsson <daniel@yesql.se> wrote:
> OpenSSL 3.4 also doesn't like it and AFAICT neither does the upcoming 3.5

Hm. FWIW, I have no issues locally with 3.4 or 3.5-alpha. Only with LibreSSL.

--Jacob

Commits

  1. doc: Add note to ssl_group config on X25519 and FIPS

  2. Avoid using the X25519 curve in ssl tests

  3. Add X25519 to the default set of curves

  4. SSL: Support ECDH key exchange