Re: [PATCH] add ssl_protocols configuration option

Alex Shulgin <ash@commandprompt.com> writes:
> * The patch works as advertised, though the only way to verify that
>   connections made with the protocol disabled by the GUC are indeed
>   rejected is to edit fe-secure-openssl.c to only allow specific TLS
>   versions.  Adding configuration on the libpq side as suggested in the
>   original discussion might help here.

I can easily do that, but I won't have time until next week or so.

DES
--
Dag-Erling Smørgrav - des@des.no