Re: Force disable of SSL renegociation in the server

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: Postgres hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>, Robert Haas <robertmhaas(at)gmail(dot)com>, Andres Freund <andres(at)anarazel(dot)de>
Subject: Re: Force disable of SSL renegociation in the server
Date: 2021-05-25 01:17:06
Message-ID: YKxQEtXfO6QfDAJi@paquier.xyz
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Mon, May 24, 2021 at 11:09:38AM +0200, Daniel Gustafsson wrote:
> 1.1.0d killed what was left of SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS while keeping
> it defined, so there is also very little value in even attempting it there.
>
> +1 on the patch, LGTM.

Thanks, applied.

I was having a very hard time putting a T instead of a C to
renegotiation..
--
Michael

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Mark Dilger 2021-05-25 01:42:20 Re: Possible pointer var TupleDesc rettupdesc used not initialized (src/backend/optimizer/util/clauses.c)
Previous Message Tom Lane 2021-05-25 01:12:40 Re: Test of a partition with an incomplete detach has a timing issue