Re: Allow ssl_renegotiation_limit in PG 9.5

From: Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>
To: Andres Freund <andres(at)anarazel(dot)de>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Shay Rojansky <roji(at)roji(dot)org>, "Pgsql-hackers(at)postgresql(dot)org" <Pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Allow ssl_renegotiation_limit in PG 9.5
Date: 2015-10-14 17:19:40
Message-ID: 20151014171940.GB4405@alvherre.pgsql
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Andres Freund wrote:
> On 2015-10-14 13:04:30 -0400, Tom Lane wrote:
> > It doesn't seem to me that a connector such as npgsql has any business
> > whatsoever fooling with such a parameter, unconditionally or otherwise.
>
> I think in npgsql simply doesn't support renegotiation (IIRC because
> it'd have been hard to implement in .net). Which makes it somewhat
> reasonable to set it to 0.

I think we could continue to have the parameter except that it throws an
error if you try to set it to something other than 0.

--
Álvaro Herrera http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Andres Freund 2015-10-14 17:21:49 Re: Allow ssl_renegotiation_limit in PG 9.5
Previous Message Andres Freund 2015-10-14 17:06:38 Re: Allow ssl_renegotiation_limit in PG 9.5