pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedError in PostgreSQL log
4+ messages / 2 participants
[nested] [flat]
* Error in PostgreSQL log
@ 2010-04-28 20:37 Campbell, Lance <lance@illinois.edu>
0 siblings, 1 reply; 4+ messages in thread
From: Campbell, Lance @ 2010-04-28 20:37 UTC (permalink / raw)
To: pgsql-admin
PostgreSQL: 8.4.3
I found the following in my error log:
LOG: SSL error: unsafe legacy renegotiation disabled
Anyone have a clue what this means?
Thanks,
Lance Campbell
Software Architect/DBA/Project Manager
Web Services at Public Affairs
217-333-0382
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Error in PostgreSQL log
@ 2010-04-28 20:47 Tom Lane <tgl@sss.pgh.pa.us>
parent: Campbell, Lance <lance@illinois.edu>
0 siblings, 1 reply; 4+ messages in thread
From: Tom Lane @ 2010-04-28 20:47 UTC (permalink / raw)
To: Campbell, Lance <lance@illinois.edu>; +Cc: pgsql-admin
"Campbell, Lance" <lance@illinois.edu> writes:
> PostgreSQL: 8.4.3
> I found the following in my error log:
> LOG: SSL error: unsafe legacy renegotiation disabled
> Anyone have a clue what this means?
It means your SSL library is maintained by someone with a clue ;-).
It's dealing with CVE-2009-3555 without simply breaking things.
However, you might want to update the SSL library at the other end,
or if you can't do that you might want to set ssl_renegotiation_limit = 0
to suppress the warning messages.
regards, tom lane
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Error in PostgreSQL log
@ 2010-04-29 13:57 Campbell, Lance <lance@illinois.edu>
parent: Tom Lane <tgl@sss.pgh.pa.us>
0 siblings, 1 reply; 4+ messages in thread
From: Campbell, Lance @ 2010-04-29 13:57 UTC (permalink / raw)
To: Tom Lane <tgl@sss.pgh.pa.us>; +Cc: pgsql-admin
Tom,
Thanks. Do I add the following to the postgresql.conf file?
ssl_renegotiation_limit = 0
Thanks,
Lance Campbell
Software Architect/DBA/Project Manager
Web Services at Public Affairs
217-333-0382
-----Original Message-----
From: Tom Lane [mailto:tgl@sss.pgh.pa.us]
Sent: Wednesday, April 28, 2010 3:47 PM
To: Campbell, Lance
Cc: pgsql-admin@postgresql.org
Subject: Re: [ADMIN] Error in PostgreSQL log
"Campbell, Lance" <lance@illinois.edu> writes:
> PostgreSQL: 8.4.3
> I found the following in my error log:
> LOG: SSL error: unsafe legacy renegotiation disabled
> Anyone have a clue what this means?
It means your SSL library is maintained by someone with a clue ;-).
It's dealing with CVE-2009-3555 without simply breaking things.
However, you might want to update the SSL library at the other end,
or if you can't do that you might want to set ssl_renegotiation_limit =
0
to suppress the warning messages.
regards, tom lane
^ permalink raw reply [nested|flat] 4+ messages in thread
* Re: Error in PostgreSQL log
@ 2010-04-29 14:06 Tom Lane <tgl@sss.pgh.pa.us>
parent: Campbell, Lance <lance@illinois.edu>
0 siblings, 0 replies; 4+ messages in thread
From: Tom Lane @ 2010-04-29 14:06 UTC (permalink / raw)
To: Campbell, Lance <lance@illinois.edu>; +Cc: pgsql-admin
"Campbell, Lance" <lance@illinois.edu> writes:
> Thanks. Do I add the following to the postgresql.conf file?
> ssl_renegotiation_limit = 0
Right. The variable won't be listed in your existing file, likely,
because that option is new as of last month's updates.
regards, tom lane
^ permalink raw reply [nested|flat] 4+ messages in thread
end of thread, other threads:[~2010-04-29 14:06 UTC | newest]
Thread overview: 4+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2010-04-28 20:37 Error in PostgreSQL log Campbell, Lance <lance@illinois.edu>
2010-04-28 20:47 ` Tom Lane <tgl@sss.pgh.pa.us>
2010-04-29 13:57 ` Campbell, Lance <lance@illinois.edu>
2010-04-29 14:06 ` Tom Lane <tgl@sss.pgh.pa.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox