pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed

From: Tom Lane <tgl@sss.pgh.pa.us>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Daniel Gustafsson <daniel@yesql.se>
Cc: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: Update minimum SSL version
Date: Mon, 02 Dec 2019 11:39:28 -0500
Message-ID: <929.1575304768@sss.pgh.pa.us> (raw)
In-Reply-To: <CA+TgmobM7j=+NN+juu9=urfw0-Bt22QvDdxaPW8O-KK5yegADQ@mail.gmail.com>
References: <b327f8df-da98-054d-0cc5-b76a857cfed9@2ndquadrant.com>
	<224FD25C-BA10-44FA-95AA-F97C35FB3BB0@yesql.se>
	<CABUevEy4meLCVnrTbjU9zoJvRoWUjvmdmUUkaoAqKYkk0MWHYA@mail.gmail.com>
	<20191129125727.GN2505@paquier.xyz>
	<13786.1575041447@sss.pgh.pa.us>
	<20191130024345.GD99291@paquier.xyz>
	<CA+TgmobM7j=+NN+juu9=urfw0-Bt22QvDdxaPW8O-KK5yegADQ@mail.gmail.com>

Robert Haas <robertmhaas@gmail.com> writes:
> ... However, it would be worth putting in some
> effort to make sure that we give a good error message if this happens.

That's an excellent point, but it looks like we're pretty good
already.  I tried the patch with openssl 0.9.8x, and got this
failure at server start:

FATAL:  ssl_min_protocol_version setting TLSv1.2 not supported by this build

Maybe it'd be worth extending that to show the max supported
version, with some rats-nest of #ifdefs, but I'm not sure if
it's worth the trouble.

			regards, tom lane

view thread (38+ messages)  latest in thread

Message-ID: <929.1575304768@sss.pgh.pa.us>
Permalink:  ../929.1575304768@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/929.1575304768@sss.pgh.pa.us

copy link · copy postgr.es

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, robertmhaas@gmail.com, michael@paquier.xyz, magnus@hagander.net, daniel@yesql.se, peter.eisentraut@2ndquadrant.com
  Subject: Re: Update minimum SSL version
  In-Reply-To: <929.1575304768@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox