Re: Removing SSL renegotiation (Was: Should we back-patch SSL renegotiation fixes?)

From: Andres Freund <andres(at)anarazel(dot)de>
To: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Removing SSL renegotiation (Was: Should we back-patch SSL renegotiation fixes?)
Date: 2015-06-26 19:39:26
Message-ID: 20150626193926.GC30708@awork2.anarazel.de
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On 2015-06-26 15:36:53 -0400, David G. Johnston wrote:
> On Fri, Jun 26, 2015 at 3:09 PM, Andres Freund <andres(at)anarazel(dot)de> wrote:
>
> > On 2015-06-24 16:41:48 +0200, Andres Freund wrote:
> > > I, by now, have come to a different conclusion. I think it's time to
> > > entirely drop the renegotiation support.
> >
> > I think by now we essentially concluded that we should do that. What I'm
> > not sure yet is how: Do we want to rip it out in master and just change
> > the default in the backbranches, or do we want to rip it out in all
> > branches and leave a faux guc in place in the back branches. I vote for
> > the latter, but would be ok with both variants.
> >
> >
> ​3. ​Change the "default" and make the guc impotent - in the back
> branches. Its minimally invasive and accomplishes the same user-facing
> goal as "ripping it out".

What would be the point of that? The code is pretty localized, so
leaving it in, but unreachable, seems to have no benefits.

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Jeff Janes 2015-06-26 19:39:46 Re: BRIN index bug due to WAL refactoring
Previous Message David G. Johnston 2015-06-26 19:36:53 Re: Removing SSL renegotiation (Was: Should we back-patch SSL renegotiation fixes?)