[pgpool-committers: 3227] pgpool: Permit pgpool to support multiple SSL cipher protocols

Muhammad Usama m.usama at gmail.com
Tue May 24 01:00:51 JST 2016


Permit pgpool to support multiple SSL cipher protocols

Currently TLSv1_method() is used to initialize the SSL context, that puts an
unnecessary limitation to allow only TLSv1 protocol for SSL communication.
While postgreSQL supports other ciphers protocols as well. The commit changes
the above and initializes the SSLSession using the SSLv23_method()
(same is also used by PostgreSQL). Because it can negotiate the use of the
highest mutually supported protocol version and remove the limitation of one
specific protocol version.

Branch
------
V3_3_STABLE

Details
-------
http://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=40d893059934b589c3774a7b2917421c303c15c1

Modified Files
--------------
pool_ssl.c | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)



More information about the pgpool-committers mailing list