Re: SSL Connection still showing TLSv1.3 even it is disabled in ssl_ciphers

tushar <tushar(dot)ahuja(at)enterprisedb(dot)com> writes:
> when  i connect to psql terminal -

> psql.bin (10.9)
> SSL connection (protocol: TLSv1.3, cipher: *TLS_AES_256_GCM_SHA384*,
> bits: 256, compression: off)
> Type "help" for help.

> postgres=# show ssl_ciphers ;
>                  ssl_ciphers
> ----------------------------------------------
>  TLSv1.2:!aNULL:!SSLv2:!SSLv3:!TLSv1:!TLSv1.3
> (1 row)

My guess is that OpenSSL ignored your ssl_ciphers setting on the
grounds that it's stupid to reject all possible ciphers.
In any case, this would be something to raise with them not us.
PG does nothing with that value except pass it to SSL_CTX_set_cipher_list.

regards, tom lane