From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Daniel Gustafsson <daniel@yesql.se>
Cc: pgsql-hackers <pgsql-hackers@postgresql.org>
Subject: Re: Update minimum SSL version
Date: Wed, 4 Dec 2019 23:58:22 +0100
Message-ID: <98c51f43-e746-714a-940c-271773f77d4c@2ndquadrant.com> (raw)
In-Reply-To: <29853.1575299606@sss.pgh.pa.us>
References: <b327f8df-da98-054d-0cc5-b76a857cfed9@2ndquadrant.com>
<224FD25C-BA10-44FA-95AA-F97C35FB3BB0@yesql.se>
<CABUevEy4meLCVnrTbjU9zoJvRoWUjvmdmUUkaoAqKYkk0MWHYA@mail.gmail.com>
<20191129125727.GN2505@paquier.xyz>
<13786.1575041447@sss.pgh.pa.us>
<20191130024345.GD99291@paquier.xyz>
<22675.1575083214@sss.pgh.pa.us>
<7e217273-b550-96e5-f36f-a818ac4b5d9b@2ndquadrant.com>
<29853.1575299606@sss.pgh.pa.us>
On 2019-12-02 16:13, Tom Lane wrote:
> Peter Eisentraut <peter.eisentraut@2ndquadrant.com> writes:
>> On 2019-11-30 04:06, Tom Lane wrote:
>>> I think the real question we have to answer is this: are we intent on
>>> making people upgrade ancient openssl installations?
>
>> The trade-off is that this makes the defaults better for the vast
>> majority of users and gives users of really old systems a nudge that
>> they are no longer in compliance with industry best practices. You need
>> manual steps to set up SSL anyway, so this doesn't introduce an entirely
>> new kind of requirement for the latter group of users.
>
> True. I'm okay with this as long as we adapt the ssl test suite as
> per your other reply.
I have committed this with that change. The discussion on which OpenSSL
versions to support and how will continue.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: peter.eisentraut@2ndquadrant.com, tgl@sss.pgh.pa.us, michael@paquier.xyz, magnus@hagander.net, daniel@yesql.se
Subject: Re: Update minimum SSL version
In-Reply-To: <98c51f43-e746-714a-940c-271773f77d4c@2ndquadrant.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox