pgsql: Set libpq sslcompression to off by default

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: Set libpq sslcompression to off by default
Date: 2018-03-17 13:23:12
Message-ID: E1exBnk-00018B-Qw@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Set libpq sslcompression to off by default

Since SSL compression is no longer recommended, turn the default in
libpq from on to off.

OpenSSL 1.1.0 and many distribution packages already turn compression
off by default, so such a server won't accept compression anyway. So
this will mainly affect users of older OpenSSL installations.

Also update the documentation to make clear that this setting is no
longer recommended.

Discussion: https://www.postgresql.org/message-id/flat/595cf3b1-4ffe-7f05-6f72-f72b7afa7993%402ndquadrant.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/e3bdb2d92600ed45bd46aaf48309a436a9628218

Modified Files
--------------
doc/src/sgml/libpq.sgml | 31 ++++++++++++++++++++-----------
src/interfaces/libpq/fe-connect.c | 2 +-
src/interfaces/libpq/fe-secure-openssl.c | 8 ++++----
3 files changed, 25 insertions(+), 16 deletions(-)

Responses

Browse pgsql-committers by date

  From Date Subject
Next Message Tom Lane 2018-03-17 16:47:57 Re: pgsql: Set libpq sslcompression to off by default
Previous Message Peter Eisentraut 2018-03-17 12:31:55 pgsql: Add ssl_passphrase_command setting