Horton

Re: ecdh support causes unnecessary roundtrips

Daniel Gustafsson <daniel@yesql.se>

View thread View on postgr.es
From: Daniel Gustafsson <daniel@yesql.se>
To: Jacob Champion <jacob.champion@enterprisedb.com>
Cc: Andres Freund <andres@anarazel.de>, PostgreSQL Hackers <pgsql-hackers@postgresql.org>, Marko Kreen <markokr@gmail.com>, Adrian Klaver <adrian.klaver@gmail.com>, Peter Eisentraut <peter_e@gmx.net>, Heikki Linnakangas <hlinnaka@iki.fi>
Date: 2025-03-18T09:45:41Z
Lists: pgsql-hackers 
> On 18 Mar 2025, at 00:34, Jacob Champion <jacob.champion@enterprisedb.com> wrote:
> 
> On Thu, Mar 13, 2025 at 2:41 PM Daniel Gustafsson <daniel@yesql.se> wrote:
>> OpenSSL 3.4 also doesn't like it and AFAICT neither does the upcoming 3.5, just
>> haven't had the cycles yet to ship out a new patch with all the time-consuming
>> testing it requires =)
> 
> Here is a squash fix to change the capitalization -- this passes
> locally for LibreSSL 3.4 to 3.8 and OpenSSL 1.1.1 to 3.5.
> 
> (Hmm, my LibreSSLs are a little out of date; it looks like I need to
> add 3.9 and 4.0 to the suite.)

Thanks for doing that, I'll try to get this in during a break in todays conference.

--
Daniel Gustafsson

Commits

  1. doc: Add note to ssl_group config on X25519 and FIPS

  2. Avoid using the X25519 curve in ssl tests

  3. Add X25519 to the default set of curves

  4. SSL: Support ECDH key exchange