public inbox for [email protected]
help / color / mirror / Atom feedFrom: Dmitry Dolgov <[email protected]>
To: Jacob Champion <[email protected]>
Cc: Daniel Gustafsson <[email protected]>
Cc: PostgreSQL Hackers <[email protected]>
Subject: Re: Add ssl_(supported|shared)_groups to sslinfo
Date: Wed, 18 Mar 2026 12:18:52 +0100
Message-ID: <rf5vuhdo4ub2qz3eivighhjs4tfkfclbosptnhzdpzibx5aq6z@faylol54ro5s> (raw)
In-Reply-To: <izopeja2suconbqpbswmtto5czajnc4p7rsml5gwwrs56lexaj@kmqdrqiepays>
References: <d57duqvzkxe43oons3jkdq7pj2wacidg7qorxommri74evu3l2@4x53she7mf77>
<[email protected]>
<CAOYmi+nkT7rkbNd6que0wtz=epOikgBKSDR88DQ=cyNJwiUw8Q@mail.gmail.com>
<srua2tidoiztaytmxlwjfpjhntxelmxpfta4lhulvlker444yg@sf232zqm3qvs>
<CAOYmi+k7v6hP5nM7BQdKu37TJFi-X=d7_SDswZBV5q0awxPVYg@mail.gmail.com>
<qyw7l5ztbqouluctxgbxc2aty43suulka2q4ybpaew4tey7rlw@l66rjb7vxxhk>
<CAOYmi+=r50Kk1c7A7O8yXwJzALyyqDmQE7FiCZvZmt_3WRBGwQ@mail.gmail.com>
<izopeja2suconbqpbswmtto5czajnc4p7rsml5gwwrs56lexaj@kmqdrqiepays>
> On Tue, Mar 03, 2026 at 11:43:10AM +0100, Dmitry Dolgov wrote:
> Naming is hard of course, but my plan was to stick to short names like
> those above, and unwrap them in the documentation:
>
> * Supported: list of named groups supported by the client for key
> exchange in the form of "supported_groups" extension.
>
> Supported group is the exact terminology used in the TLS spec.
>
> * Shared: lisf of named groups shared with the server side.
>
> This one actually doesn't appear in the spec. The closest name
> featured is "selected_groups", but only in the context of the retry
> requests. Thus I took this form the OpenSSL docs.
>
> * Negotiated: the group used for the handshake key exchange process.
>
> Surprsingly, I don't see any exact terminology for this in the TLS
> spec, it just says "the named group for the key being exchanged". The
> name is taken from the OpenSSL documentation.
>
> How does it sound?
Added those into the documentation, will create a CF item.
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected]
Subject: Re: Add ssl_(supported|shared)_groups to sslinfo
In-Reply-To: <rf5vuhdo4ub2qz3eivighhjs4tfkfclbosptnhzdpzibx5aq6z@faylol54ro5s>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox