Re: Add ssl_(supported|shared)_groups to sslinfo

From: Dmitry Dolgov <9erthalion6(at)gmail(dot)com>
To: Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>
Cc: Daniel Gustafsson <daniel(at)yesql(dot)se>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Add ssl_(supported|shared)_groups to sslinfo
Date: 2026-03-18 11:18:52
Message-ID: rf5vuhdo4ub2qz3eivighhjs4tfkfclbosptnhzdpzibx5aq6z@faylol54ro5s
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> On Tue, Mar 03, 2026 at 11:43:10AM +0100, Dmitry Dolgov wrote:
> Naming is hard of course, but my plan was to stick to short names like
> those above, and unwrap them in the documentation:
>
> * Supported: list of named groups supported by the client for key
> exchange in the form of "supported_groups" extension.
>
> Supported group is the exact terminology used in the TLS spec.
>
> * Shared: lisf of named groups shared with the server side.
>
> This one actually doesn't appear in the spec. The closest name
> featured is "selected_groups", but only in the context of the retry
> requests. Thus I took this form the OpenSSL docs.
>
> * Negotiated: the group used for the handshake key exchange process.
>
> Surprsingly, I don't see any exact terminology for this in the TLS
> spec, it just says "the named group for the key being exchanged". The
> name is taken from the OpenSSL documentation.
>
> How does it sound?

Added those into the documentation, will create a CF item.

Attachment Content-Type Size
v3-0001-contrib-sslinfo-Add-ssl_group_info.patch text/plain 9.7 KB

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Junwang Zhao 2026-03-18 11:33:14 Re: SQL Property Graph Queries (SQL/PGQ)
Previous Message Aleksander Alekseev 2026-03-18 11:14:27 Re: Add uuid_to_base32hex() and base32hex_to_uuid() built-in functions