Received: from magus.postgresql.org (magus.postgresql.org [87.238.57.229]) by mail.postgresql.org (Postfix) with ESMTP id C92318B63D9 for ; Wed, 20 Jun 2012 12:34:48 -0300 (ADT) Received: from sss.pgh.pa.us ([66.207.139.130]) by magus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1ShMve-0000Ah-Hk for pgsql-hackers@postgresql.org; Wed, 20 Jun 2012 15:34:48 +0000 Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.5/8.14.5) with ESMTP id q5KFYPLu026826; Wed, 20 Jun 2012 11:34:25 -0400 (EDT) From: Tom Lane To: Florian Pflug cc: Robert Haas , Martijn van Oosterhout , Magnus Hagander , Euler Taveira , Bruce Momjian , Pgsql Hackers Subject: Re: libpq compression In-reply-to: <1D8B2B60-F42E-448C-9295-C07FACCF0611@phlo.org> References: <4FDB954F.9010606@timbira.com> <5136.1339799120@sss.pgh.pa.us> <5365.1339799869@sss.pgh.pa.us> <11357.1339822502@sss.pgh.pa.us> <19804.1339859730@sss.pgh.pa.us> <9B10BD6E-31AA-4699-BB67-5C386B623F77@phlo.org> <27043.1339950593@sss.pgh.pa.us> <20120618174233.GA24681@svana.org> <1D8B2B60-F42E-448C-9295-C07FACCF0611@phlo.org> Comments: In-reply-to Florian Pflug message dated "Wed, 20 Jun 2012 12:35:29 +0200" Date: Wed, 20 Jun 2012 11:34:25 -0400 Message-ID: <26825.1340206465@sss.pgh.pa.us> X-Pg-Spam-Score: -1.9 (-) X-Archive-Number: 201206/1157 X-Sequence-Number: 209997 Florian Pflug writes: > I wonder though if shouldn't restrict the allowed ciphers list to being > a simple list of supported ciphers. If our goal is to support multiple > SSL libraries transparently then surely having openssl-specific syntax > in the config file isn't exactly great anyway... No, we don't want to go there, because then we'd have to worry about keeping the default list in sync with what's supported by the particular version of the particular library we chance to be using. That's about as far from transparent as you can get. A notation like "DEFAULT" is really quite ideal for our purposes in that respect. regards, tom lane