Horton

Re: Force disable of SSL renegociation in the server

Michael Paquier <michael@paquier.xyz>

View thread View on postgr.es
From: Michael Paquier <michael@paquier.xyz>
To: Daniel Gustafsson <daniel@yesql.se>
Cc: Postgres hackers <pgsql-hackers@lists.postgresql.org>, Robert Haas <robertmhaas@gmail.com>, Andres Freund <andres@anarazel.de>
Date: 2021-05-25T01:17:06Z
Lists: pgsql-hackers 
On Mon, May 24, 2021 at 11:09:38AM +0200, Daniel Gustafsson wrote:
> 1.1.0d killed what was left of SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS while keeping
> it defined, so there is also very little value in even attempting it there.
> 
> +1 on the patch, LGTM.

Thanks, applied.

I was having a very hard time putting a T instead of a C to
renegotiation..
--
Michael

Commits

  1. Disallow SSL renegotiation