upstream/postgresql
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2026-03-13 14:14:09 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
postgresql/src
History
Michael Paquier 41aadeeb12 Add GUC checks for ssl_min_protocol_version and ssl_max_protocol_version 
Mixing incorrect bounds set in the SSL context leads to confusing error
messages generated by OpenSSL which are hard to act on.  New checks are
added within the GUC machinery to improve the user experience as they
apply to any SSL implementation, not only OpenSSL, and doing the checks
beforehand avoids the creation of a SSL during a reload (or startup)
which we know will never be used anyway.

Backpatch down to 12, as those parameters have been introduced by
e73e67c.

Author: Michael Paquier
Reviewed-by: Daniel Gustafsson
Discussion: https://postgr.es/m/20200114035420.GE1515@paquier.xyz
Backpatch-through: 12
2020-01-18 12:32:43 +09:00
..
backend Add GUC checks for ssl_min_protocol_version and ssl_max_protocol_version 2020-01-18 12:32:43 +09:00
bin Move wchar.c and encnames.c to src/common/. 2020-01-16 15:58:55 -05:00
common Move OpenSSL routines for min/max protocol setting to src/common/ 2020-01-17 10:06:17 +09:00
fe_utils Reduce size of backend scanner's tables. 2020-01-13 15:04:31 -05:00
include Avoid full scan of GIN indexes when possible 2020-01-18 01:11:39 +03:00
interfaces Move wchar.c and encnames.c to src/common/. 2020-01-16 15:58:55 -05:00
makefiles Remove libpq.rc, use win32ver.rc for libpq 2020-01-15 15:06:12 +01:00
pl Reduce size of backend scanner's tables. 2020-01-13 15:04:31 -05:00
port Remove libpq.rc, use win32ver.rc for libpq 2020-01-15 15:06:12 +01:00
template Fix compiler warning for ppoll() on Cygwin 2019-12-22 23:20:00 +01:00
test Add GUC checks for ssl_min_protocol_version and ssl_max_protocol_version 2020-01-18 12:32:43 +09:00
timezone Update copyrights for 2020 2020-01-01 12:21:45 -05:00
tools Move OpenSSL routines for min/max protocol setting to src/common/ 2020-01-17 10:06:17 +09:00
tutorial Update copyrights for 2020 2020-01-01 12:21:45 -05:00
.gitignore
DEVELOPERS
Makefile Fix partial-build problems introduced by having more generated headers. 2018-04-09 16:42:10 -04:00
Makefile.global.in Add support for automatically updating Unicode derived files 2020-01-09 10:08:14 +01:00
Makefile.shlib Clean up MinGW def file generation 2019-10-20 10:19:13 +02:00
nls-global.mk NLS: Fix backend gettext triggers 2019-09-23 09:04:20 +02:00