Date: Wed, 18 Mar 2026 12:18:52 +0100
From: Dmitry Dolgov <9erthalion6@gmail.com>
To: Jacob Champion <jacob.champion@enterprisedb.com>
Cc: Daniel Gustafsson <daniel@yesql.se>,
	PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Add ssl_(supported|shared)_groups to sslinfo
Message-ID: <rf5vuhdo4ub2qz3eivighhjs4tfkfclbosptnhzdpzibx5aq6z@faylol54ro5s>
References: <d57duqvzkxe43oons3jkdq7pj2wacidg7qorxommri74evu3l2@4x53she7mf77>
 <D1EC4B00-9593-488F-916D-090A73E69B4E@yesql.se>
 <CAOYmi+nkT7rkbNd6que0wtz=epOikgBKSDR88DQ=cyNJwiUw8Q@mail.gmail.com>
 <srua2tidoiztaytmxlwjfpjhntxelmxpfta4lhulvlker444yg@sf232zqm3qvs>
 <CAOYmi+k7v6hP5nM7BQdKu37TJFi-X=d7_SDswZBV5q0awxPVYg@mail.gmail.com>
 <qyw7l5ztbqouluctxgbxc2aty43suulka2q4ybpaew4tey7rlw@l66rjb7vxxhk>
 <CAOYmi+=r50Kk1c7A7O8yXwJzALyyqDmQE7FiCZvZmt_3WRBGwQ@mail.gmail.com>
 <izopeja2suconbqpbswmtto5czajnc4p7rsml5gwwrs56lexaj@kmqdrqiepays>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="fucpmbwjcehrmjf7"
Content-Disposition: inline
In-Reply-To: <izopeja2suconbqpbswmtto5czajnc4p7rsml5gwwrs56lexaj@kmqdrqiepays>
Archived-At: 
 <https://www.postgresql.org/message-id/rf5vuhdo4ub2qz3eivighhjs4tfkfclbosptnhzdpzibx5aq6z%40faylol54ro5s>
Precedence: bulk


--fucpmbwjcehrmjf7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

> On Tue, Mar 03, 2026 at 11:43:10AM +0100, Dmitry Dolgov wrote:
> Naming is hard of course, but my plan was to stick to short names like
> those above, and unwrap them in the documentation:
> 
> * Supported: list of named groups supported by the client for key
>   exchange in the form of "supported_groups" extension.
> 
>   Supported group is the exact terminology used in the TLS spec.
> 
> * Shared: lisf of named groups shared with the server side.
> 
>   This one actually doesn't appear in the spec. The closest name
>   featured is "selected_groups", but only in the context of the retry
>   requests. Thus I took this form the OpenSSL docs.
> 
> * Negotiated: the group used for the handshake key exchange process.
> 
>   Surprsingly, I don't see any exact terminology for this in the TLS
>   spec, it just says "the named group for the key being exchanged". The
>   name is taken from the OpenSSL documentation.
> 
> How does it sound?

Added those into the documentation, will create a CF item.

--fucpmbwjcehrmjf7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment;
	filename="v3-0001-contrib-sslinfo-Add-ssl_group_info.patch"