[pgpool-committers: 3226] pgpool: Permit pgpool to support multiple SSL cipher protocols

Muhammad Usama m.usama at gmail.com
Tue May 24 01:00:51 JST 2016


Permit pgpool to support multiple SSL cipher protocols

Currently TLSv1_method() is used to initialize the SSL context, that puts an
unnecessary limitation to allow only TLSv1 protocol for SSL communication.
While postgreSQL supports other ciphers protocols as well. The commit changes
the above and initializes the SSLSession using the SSLv23_method()
(same is also used by PostgreSQL). Because it can negotiate the use of the
highest mutually supported protocol version and remove the limitation of one
specific protocol version.

Branch
------
V3_4_STABLE

Details
-------
http://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=7f89fde7ea5cf036f329cd380e789aafc118b58f

Modified Files
--------------
src/utils/pool_ssl.c | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)



More information about the pgpool-committers mailing list