From: | Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Maciek Sakrejda <maciek(at)heroku(dot)com> |
Cc: | pgsql-general(at)postgresql(dot)org |
Subject: | Re: sslcompression / PGSSLCOMPRESSION not behaving as documented? |
Date: | 2015-01-16 16:41:54 |
Message-ID: | 54B93F52.2020405@aklaver.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
On 01/16/2015 08:30 AM, Tom Lane wrote:
> Maciek Sakrejda <maciek(at)heroku(dot)com> writes:
>> I'm having a hard time getting SSL compression working (or even figuring
>> out why it's not working) with my local Postgres server. The setting [1] is
>> documented to default to on, but according to the banner when I connect
>> with psql, it's off.
>
> Possibly you have the same type of problem mentioned here:
>
> http://www.postgresql.org/message-id/CABUevEytxEQtbMeuKpJ8tYjeeB37mzDQ7BASzEZN6EgcGrdZxA@mail.gmail.com
Yes that would seem to be the issue:
https://launchpad.net/ubuntu/trusty/+source/openssl/+changelog
openssl (1.0.1e-3ubuntu1)
Disable compression to avoid CRIME systemwide (CVE-2012-4929).
>
> although Ubuntu may well have done it a bit differently than Red Hat,
> ie the way to override openssl's default behavior might be different.
>
> regards, tom lane
>
>
--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com
From | Date | Subject | |
---|---|---|---|
Next Message | Magnus Hagander | 2015-01-16 17:22:36 | Re: sslcompression / PGSSLCOMPRESSION not behaving as documented? |
Previous Message | Tom Lane | 2015-01-16 16:30:07 | Re: sslcompression / PGSSLCOMPRESSION not behaving as documented? |