Fwd: Enforcing TLS 1.3 as a a minimum version

From: John Barker <johnobarker(at)gmail(dot)com>
To: pgadmin-support(at)lists(dot)postgresql(dot)org
Subject: Fwd: Enforcing TLS 1.3 as a a minimum version
Date: 2025-04-07 18:29:43
Message-ID: CA+7KU8qGkLzzAFJHuJfCe=jZuOG2ZHAWQvgv+oW+5m5ZBNAsOA@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgadmin-support

I am running pgAdmin 9.1 in a podman container and am trying to ensure that
TLS 1.3 is the minimum version. I have created an override file and I
know that it is being read at startup but the enforcement of TLS 1.3 is not
happening. I am using this configuration as suggested by the
documentation here: https://docs.gunicorn.org/en/21.2.0/settings.html

Any idea of what to check. I know the file is being parsed because if I
introduce a bad config, it is noted at startup.

Also, where or how is the instance variable for the config defined?

"The callable needs to accept an instance variable for the Config"

The below is a file mapped into the container called gunicorn_config.py

def ssl_context(conf, default_ssl_context_factory):
import ssl
context = default_ssl_context_factory()
context.minimum_version = ssl.TLSVersion.TLSv1_3
return context

Responses

Browse pgadmin-support by date

  From Date Subject
Next Message Khushboo Vashi 2025-04-08 11:10:04 Re: Enforcing TLS 1.3 as a a minimum version
Previous Message Dave Page 2025-04-07 12:19:18 Re: EULA Request || t/232803939