[pgpool-committers: 3229] pgpool: Permit pgpool to support multiple SSL cipher protocols

Muhammad Usama m.usama at gmail.com
Tue May 24 01:00:51 JST 2016


Permit pgpool to support multiple SSL cipher protocols

Currently TLSv1_method() is used to initialize the SSL context, that puts an
unnecessary limitation to allow only TLSv1 protocol for SSL communication.
While postgreSQL supports other ciphers protocols as well. The commit changes
the above and initializes the SSLSession using the SSLv23_method()
(same is also used by PostgreSQL). Because it can negotiate the use of the
highest mutually supported protocol version and remove the limitation of one
specific protocol version.

Branch
------
master

Details
-------
http://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=93424727fe97013686dabcb291a34d5686bb19e2

Modified Files
--------------
src/utils/pool_ssl.c | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)



More information about the pgpool-committers mailing list