Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iaiEa-0007X8-Bk for pgsql-hackers@arkaria.postgresql.org; Fri, 29 Nov 2019 15:31:04 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1iaiEZ-0002Jj-10 for pgsql-hackers@arkaria.postgresql.org; Fri, 29 Nov 2019 15:31:03 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1iaiEY-0002Jc-2V for pgsql-hackers@lists.postgresql.org; Fri, 29 Nov 2019 15:31:02 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1iaiEV-0003s3-RK for pgsql-hackers@postgresql.org; Fri, 29 Nov 2019 15:31:00 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id xATFUl1G013787; Fri, 29 Nov 2019 10:30:47 -0500 From: Tom Lane To: Michael Paquier cc: Magnus Hagander , Daniel Gustafsson , Peter Eisentraut , pgsql-hackers Subject: Re: Update minimum SSL version In-reply-to: <20191129125727.GN2505@paquier.xyz> References: <224FD25C-BA10-44FA-95AA-F97C35FB3BB0@yesql.se> <20191129125727.GN2505@paquier.xyz> Comments: In-reply-to Michael Paquier message dated "Fri, 29 Nov 2019 21:57:27 +0900" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <13785.1575041447.1@sss.pgh.pa.us> Date: Fri, 29 Nov 2019 10:30:47 -0500 Message-ID: <13786.1575041447@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Michael Paquier writes: > On Fri, Nov 29, 2019 at 01:40:48PM +0100, Magnus Hagander wrote: >> +1. As long as we still have support to change it down if needed, it's a >> good thing to ship with a proper default. > +1. What's the impact going to be on buildfarm members with older openssl installations? Perhaps "none", if they aren't running the ssl test suite, but we should be clear about it. regards, tom lane