Robert Haas <robertmh...@gmail.com> writes: > ... Worse yet, users are > not going to intrinsically know which SSL implementation was compiled > into the server they have.
That is a really good point. For precedent, note that darn near nobody seems to know whether their psql contains readline or libedit. If we force the issue by giving the settings different names, then they'll be forced to figure out which SSL implementation they have. On the other hand, you could argue that there are more user-friendly ways to expose that information than demanding that users play twenty questions with their config files. I'd at least want us to recognize when somebody tries to set "openssl_foo" in a gnutls implementation, and respond with "you need to twiddle the gnutls_xxx variables instead" rather than just "unrecognized configuration parameter". Maybe that'd be good enough, though. Also, this isn't really a good argument against using uniform names for parameters that every implementation is certain to have, like ssl_key_file. regards, tom lane