Alex Shulgin <ash(at)commandprompt(dot)com> writes:
> * The patch works as advertised, though the only way to verify that
> connections made with the protocol disabled by the GUC are indeed
> rejected is to edit fe-secure-openssl.c to only allow specific TLS
> versions. Adding configuration on the libpq side as suggested in the
> original discussion might help here.
I can easily do that, but I won't have time until next week or so.
DES
--
Dag-Erling Smørgrav - des(at)des(dot)no