pg.ddx.io pgsql-docs@postgresql.org mailing list archive
help / color / mirror / Atom feedDocumentation does not SSL parameters are postmaster-only
3+ messages / 2 participants
[nested] [flat]
* Documentation does not SSL parameters are postmaster-only
@ 2016-11-24 07:00 Michael Paquier <michael.paquier@gmail.com>
0 siblings, 1 reply; 3+ messages in thread
From: Michael Paquier @ 2016-11-24 07:00 UTC (permalink / raw)
To: pgsql-docs
Hi all,
While looking at the patch to support reload of SSL parameters, I have
noticed that the following SSL parameters are not mentioned as
parameters that can only be set at server start:
- ssl_ciphers
- ssl_ecdh_curve
- ssl_prefer_server_ciphers
Attached is a patch to correct the documentation.
Thanks,
--
Michael
--
Sent via pgsql-docs mailing list (pgsql-docs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-docs
Attachments:
ssl_doc_fixes.patch (application/x-patch, 1.4K) download
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml
index adab2f8..66d7f75 100644
--- a/doc/src/sgml/config.sgml
+++ b/doc/src/sgml/config.sgml
@@ -1048,7 +1048,8 @@ include_dir 'conf.d'
in the <application>OpenSSL</> package for the syntax of this setting
and a list of supported values. The default value is
<literal>HIGH:MEDIUM:+3DES:!aNULL</>. It is usually reasonable,
- unless you have specific security requirements.
+ unless you have specific security requirements. This parameter can only
+ be set at server start.
</para>
<para>
@@ -1120,7 +1121,8 @@ include_dir 'conf.d'
<listitem>
<para>
Specifies whether to use the server's SSL cipher preferences, rather
- than the client's. The default is true.
+ than the client's. The default is true. This parameter can only be
+ set at server start.
</para>
<para>
@@ -1144,7 +1146,8 @@ include_dir 'conf.d'
Specifies the name of the curve to use in <acronym>ECDH</> key
exchange. It needs to be supported by all clients that connect.
It does not need to be same curve as used by server's Elliptic
- Curve key. The default is <literal>prime256v1</>.
+ Curve key. The default is <literal>prime256v1</>. This parameter
+ can only be set at server start.
</para>
<para>
* Re: Documentation does not SSL parameters are postmaster-only
@ 2016-11-27 16:12 Magnus Hagander <magnus@hagander.net>
parent: Michael Paquier <michael.paquier@gmail.com>
0 siblings, 1 reply; 3+ messages in thread
From: Magnus Hagander @ 2016-11-27 16:12 UTC (permalink / raw)
To: Michael Paquier <michael.paquier@gmail.com>; +Cc: pgsql-docs
On Thu, Nov 24, 2016 at 8:00 AM, Michael Paquier <michael.paquier@gmail.com>
wrote:
> Hi all,
>
> While looking at the patch to support reload of SSL parameters, I have
> noticed that the following SSL parameters are not mentioned as
> parameters that can only be set at server start:
> - ssl_ciphers
> - ssl_ecdh_curve
> - ssl_prefer_server_ciphers
> Attached is a patch to correct the documentation.
>
Applied, thanks.
--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/
^ permalink raw reply [nested|flat] 3+ messages in thread
* Re: Documentation does not SSL parameters are postmaster-only
@ 2016-11-28 00:50 Michael Paquier <michael.paquier@gmail.com>
parent: Magnus Hagander <magnus@hagander.net>
0 siblings, 0 replies; 3+ messages in thread
From: Michael Paquier @ 2016-11-28 00:50 UTC (permalink / raw)
To: Magnus Hagander <magnus@hagander.net>; +Cc: pgsql-docs
On Sun, Nov 27, 2016 at 05:12:34PM +0100, Magnus Hagander wrote:
> Applied, thanks.
Thanks.
--
Michael
Attachments:
signature.asc (application/pgp-signature, 454B) download
^ permalink raw reply [nested|flat] 3+ messages in thread
end of thread, other threads:[~2016-11-28 00:50 UTC | newest]
Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2016-11-24 07:00 Documentation does not SSL parameters are postmaster-only Michael Paquier <michael.paquier@gmail.com>
2016-11-27 16:12 ` Magnus Hagander <magnus@hagander.net>
2016-11-28 00:50 ` Michael Paquier <michael.paquier@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox