| From: | pramod kg <pramod11287(at)gmail(dot)com> |
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
| Cc: | pgsql-admin(at)postgresql(dot)org |
| Subject: | Re: PostgreSQL SSL params |
| Date: | 2021-06-14 03:43:31 |
| Message-ID: | CAHkcXnwwJa2ZSFLsxYn+4S5mF8d7ODYFe5QNMD522NeZ08MG4Q@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-admin |
Should it be combination of
'HIGH:!aNULL' ??
Regards,
Pramod
On Sun, 13 Jun 2021, 20:34 Tom Lane, <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
> pramod kg <pramod11287(at)gmail(dot)com> writes:
> > I have enabled ssl on my PG servers and have set ssl_cipher to "HIGH".
> > Still, the security team complains that weak ciphers are accepted at
> server
> > side (They have run some security tests).
>
> The default setting of that is
>
> #ssl_ciphers = 'HIGH:MEDIUM:+3DES:!aNULL' # allowed SSL ciphers
>
> Perhaps the problem is your ill-advised removal of the !aNULL part.
>
> regards, tom lane
>
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2021-06-14 06:00:44 | Re: pg_restore can't re-mat mat view that uses a function which depends on another mat view |
| Previous Message | Wells Oliver | 2021-06-13 22:15:59 | pg_restore can't re-mat mat view that uses a function which depends on another mat view |