MIME-Version: 1.0
From: xx Z <xxz030811@gmail.com>
Date: Tue, 26 Aug 2025 19:48:44 +0800
Message-ID: <CA+aQVjKMYngg0AVHVOcj8veB5yqoA=HCTKe-QQ3q-AovHTB0SQ@mail.gmail.com>
Subject: How to configure client-side TLS ciphers for streaming replication?
To: pgsql-general@lists.postgresql.org
Content-Type: multipart/alternative; boundary="000000000000c6bea3063d43414b"
Archived-At: <https://www.postgresql.org/message-id/CA%2BaQVjKMYngg0AVHVOcj8veB5yqoA%3DHCTKe-QQ3q-AovHTB0SQ%40mail.gmail.com>
Precedence: bulk

--000000000000c6bea3063d43414b
Content-Type: text/plain; charset="UTF-8"

Hello,
Is there a way for a streaming replication standby (client) to restrict its
list of supported TLS ciphers, similar to how the ssl_ciphers parameter
works on the primary server?
We need this for security compliance but can't find an equivalent setting
for the client-side connection in primary_conninfo.
Thanks,

--000000000000c6bea3063d43414b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hello,<div dir=3D"auto">Is there a way for a streaming replication standby =
(client) to restrict its list of supported TLS ciphers, similar to how the =
ssl_ciphers parameter works on the primary server?</div><div dir=3D"auto">W=
e need this for security compliance but can&#39;t find an equivalent settin=
g for the client-side connection in primary_conninfo.</div><div dir=3D"auto=
">Thanks,</div>

--000000000000c6bea3063d43414b--