Re: [HACKERS] libpq connection strings: control over the ciphersuites?

Поиск
Список
Период
Сортировка
Искать
От
Joe Conway
Тема
Re: [HACKERS] libpq connection strings: control over the ciphersuites?
Дата
Msg-id
a7783475-b698-013d-ff0b-3ae4449a423f@joeconway.com
Ответ на
Re: [HACKERS] libpq connection strings: control over the cipher suites? (Michael Paquier)
Список
Дерево обсуждения
[HACKERS] libpq connection strings: control over the cipher suites? Graham Leggett <minfrin@sharp.fm>
Re: [HACKERS] libpq connection strings: control over the ciphersuites? Joe Conway <mail@joeconway.com>
Re: [HACKERS] libpq connection strings: control over the cipher suites? Michael Paquier <michael.paquier@gmail.com>
Re: [HACKERS] libpq connection strings: control over the ciphersuites? Joe Conway <mail@joeconway.com> 
On 11/09/2017 03:17 PM, Michael Paquier wrote:
> On Fri, Nov 10, 2017 at 2:53 AM, Joe Conway  wrote:
>> On 11/09/2017 03:27 AM, Graham Leggett wrote:
>>> Is there a parameter or mechanism for setting the required ssl cipher list from the client side?
>>
>> I don't believe so. That is controlled by ssl_ciphers, which requires a
>> restart in order to change.
>>
>> https://www.postgresql.org/docs/10/static/runtime-config-connection.html#GUC-SSL-CIPHERS
> 
> Since commit de41869 present in v10, SSL parameters can be reloaded.

Oh, cool, I must have missed that -- thanks!

Joe

-- 
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development
В списке pgsql-hackers по дате отправления
Предыдущее
От: Tom Lane
Дата:
Следующее
От: Jeff Janes
Дата:
FAQ