On 2019-12-02 16:13, Tom Lane wrote:
Peter Eisentraut <peter.eisentr...@2ndquadrant.com> writes:
On 2019-11-30 04:06, Tom Lane wrote:
I think the real question we have to answer is this: are we intent on
making people upgrade ancient openssl installations?
The trade-off is that this makes the defaults better for the vast
majority of users and gives users of really old systems a nudge that
they are no longer in compliance with industry best practices. You need
manual steps to set up SSL anyway, so this doesn't introduce an entirely
new kind of requirement for the latter group of users.
True. I'm okay with this as long as we adapt the ssl test suite as
per your other reply.
I have committed this with that change. The discussion on which OpenSSL
versions to support and how will continue.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
