[pgpool-committers: 3230] pgpool: Permit pgpool to support multiple SSL cipher protocols

Muhammad Usama m.usama at gmail.com
Tue May 24 01:00:51 JST 2016


Permit pgpool to support multiple SSL cipher protocols

Currently TLSv1_method() is used to initialize the SSL context, that puts an
unnecessary limitation to allow only TLSv1 protocol for SSL communication.
While postgreSQL supports other ciphers protocols as well. The commit changes
the above and initializes the SSLSession using the SSLv23_method()
(same is also used by PostgreSQL). Because it can negotiate the use of the
highest mutually supported protocol version and remove the limitation of one
specific protocol version.

Branch
------
V3_5_STABLE

Details
-------
http://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=6095acb69fb29e69d96840625822fbd40e025faf

Modified Files
--------------
src/utils/pool_ssl.c | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)



More information about the pgpool-committers mailing list