Horton

Re: settings to control SSL/TLS protocol version

Peter Eisentraut <peter.eisentraut@2ndquadrant.com>

View thread View on postgr.es
From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Steve Singer <steve@ssinger.info>, pgsql-hackers@lists.postgresql.org
Date: 2018-11-20T21:24:21Z
Lists: pgsql-hackers 
On 04/11/2018 04:24, Steve Singer wrote:
> The feature seems useful a lot of application servers are implementing minimal TLS protocol versions.
> I don't see a way to restrict libpq to only connect with certain protocol versions.  Maybe that is a separate patch but it would make this feature harder to test in the future.

Client-side support could be separate patch, yes.  It seems less important.

> I am updating the patch status to ready for committer.
> 
> The new status of this patch is: Ready for Committer

Committed with the change 'any' -> '' that was discussed elsewhere in
the thread.  Thanks.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

Commits

  1. Add settings to control SSL/TLS protocol version