pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed

From: Tom Lane <tgl@sss.pgh.pa.us>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Daniel Gustafsson <daniel@yesql.se>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: Update minimum SSL version
Date: Mon, 02 Dec 2019 10:13:26 -0500
Message-ID: <29853.1575299606@sss.pgh.pa.us> (raw)
In-Reply-To: <7e217273-b550-96e5-f36f-a818ac4b5d9b@2ndquadrant.com>
References: <b327f8df-da98-054d-0cc5-b76a857cfed9@2ndquadrant.com>
	<224FD25C-BA10-44FA-95AA-F97C35FB3BB0@yesql.se>
	<CABUevEy4meLCVnrTbjU9zoJvRoWUjvmdmUUkaoAqKYkk0MWHYA@mail.gmail.com>
	<20191129125727.GN2505@paquier.xyz>
	<13786.1575041447@sss.pgh.pa.us>
	<20191130024345.GD99291@paquier.xyz>
	<22675.1575083214@sss.pgh.pa.us>
	<7e217273-b550-96e5-f36f-a818ac4b5d9b@2ndquadrant.com>

Peter Eisentraut <peter.eisentraut@2ndquadrant.com> writes:
> On 2019-11-30 04:06, Tom Lane wrote:
>> I think the real question we have to answer is this: are we intent on
>> making people upgrade ancient openssl installations?

> The trade-off is that this makes the defaults better for the vast 
> majority of users and gives users of really old systems a nudge that 
> they are no longer in compliance with industry best practices.  You need 
> manual steps to set up SSL anyway, so this doesn't introduce an entirely 
> new kind of requirement for the latter group of users.

True.  I'm okay with this as long as we adapt the ssl test suite as
per your other reply.

			regards, tom lane

view thread (38+ messages)  latest in thread

Message-ID: <29853.1575299606@sss.pgh.pa.us>
Permalink:  ../29853.1575299606@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/29853.1575299606@sss.pgh.pa.us

copy link · copy postgr.es

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, peter.eisentraut@2ndquadrant.com, michael@paquier.xyz, magnus@hagander.net, daniel@yesql.se
  Subject: Re: Update minimum SSL version
  In-Reply-To: <29853.1575299606@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox