Re: Recent vendor SSL renegotiation patches break PostgreSQL

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: Recent vendor SSL renegotiation patches break PostgreSQL
Дата
Msg-id 603c8f071002030703v3fea0d12tf06197fcd0da9f74@mail.gmail.com
обсуждение исходный текст
Ответ на Recent vendor SSL renegotiation patches break PostgreSQL  (Chris Campbell <chris_campbell@mac.com>)
Ответы Re: Recent vendor SSL renegotiation patches break PostgreSQL  (Stefan Kaltenbrunner <stefan@kaltenbrunner.cc>)
Re: Recent vendor SSL renegotiation patches break PostgreSQL  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On Wed, Feb 3, 2010 at 6:24 AM, Chris Campbell <chris_campbell@mac.com> wrote:
> The flurry of patches that vendors have recently been making to OpenSSL to address
> the potential man-in-the-middle attack during SSL renegotiation have disabled SSL
> renegotiation altogether in the OpenSSL libraries. Applications that make use of SSL
> renegotiation, such as PostgreSQL, start failing.

Should we think about adding a GUC to disable renegotiation until this
blows over?

...Robert


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Bruce Momjian
Дата:
Сообщение: Partial Page Writes documentaiton mention
Следующее
От: Stefan Kaltenbrunner
Дата:
Сообщение: Re: Recent vendor SSL renegotiation patches break PostgreSQL