Re: Fine-tune TLS 1.3 cipher suites and curves lists

> On 17 Jul 2023, at 15:16, Seraphime Kirkovski wrote: > I see in the source code that only TLS 1.2 and bellow cipher lists can be > configured: > > https://github.com/postgres/postgres/blob/master/src/backend/libpq/be-secure-openssl.c#L281 > > and Postgres relies on the OpenSSL defaults for

Fine-tune TLS 1.3 cipher suites and curves lists

Hi all, I’m a security engineer and I’m looking into restricting the set of allowed ciphers on Postgres and configure a concrete set of curves on our postgres instances. I see in the source code that only TLS 1.2 and bellow cipher lists can be configured: https://github.com/postgres/postgres/