From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: should libpq also require TLSv1.2 by default?
Date: Wed, 24 Jun 2020 08:39:26 +0200
Message-ID: <a9408304-4381-a5af-d259-e55d349ae4ce@2ndquadrant.com> (raw)
In PG13, we raised the server-side default of ssl_min_protocol_version
to TLSv1.2. We also added a connection setting named
ssl_min_protocol_version to libpq. But AFAICT, the default value of the
libpq setting is empty, so any protocol version will be accepted. Is
this what we wanted? Should we raise the default in libpq as well?
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: peter.eisentraut@2ndquadrant.com
Subject: Re: should libpq also require TLSv1.2 by default?
In-Reply-To: <a9408304-4381-a5af-d259-e55d349ae4ce@2ndquadrant.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox