[pgpool-committers: 3225] pgpool: Permit pgpool to support multiple SSL cipher protocols

Muhammad Usama m.usama at gmail.com
Tue May 24 01:00:51 JST 2016


Permit pgpool to support multiple SSL cipher protocols

Currently TLSv1_method() is used to initialize the SSL context, that puts an
unnecessary limitation to allow only TLSv1 protocol for SSL communication.
While postgreSQL supports other ciphers protocols as well. The commit changes
the above and initializes the SSLSession using the SSLv23_method()
(same is also used by PostgreSQL). Because it can negotiate the use of the
highest mutually supported protocol version and remove the limitation of one
specific protocol version.

Branch
------
V3_1_STABLE

Details
-------
http://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=63de4b21a941c3f4e2bc8f0fbb39fc8e68245409

Modified Files
--------------
pool_ssl.c | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)



More information about the pgpool-committers mailing list