pgsql: Add connection parameters to control SSL protocol min/max in lib

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Add connection parameters to control SSL protocol min/max in lib
Date: 2020-01-28 01:55:43
Message-ID: E1iwG6R-0000xN-KU@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Add connection parameters to control SSL protocol min/max in libpq

These two new parameters, named sslminprotocolversion and
sslmaxprotocolversion, allow to respectively control the minimum and the
maximum version of the SSL protocol used for the SSL connection attempt.
The default setting is to allow any version for both the minimum and the
maximum bounds, causing libpq to rely on the bounds set by the backend
when negotiating the protocol to use for an SSL connection. The bounds
are checked when the values are set at the earliest stage possible as
this makes the checks independent of any SSL implementation.

Author: Daniel Gustafsson
Reviewed-by: Michael Paquier, Cary Huang
Discussion: https://postgr.es/m/4F246AE3-A7AE-471E-BD3D-C799D3748E03@yesql.se

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/ff8ca5fadd819155c82bd16fcc6b7231af649cf8

Modified Files
--------------
contrib/postgres_fdw/expected/postgres_fdw.out | 2 +-
doc/src/sgml/libpq.sgml | 54 ++++++++++++
src/backend/libpq/be-secure-openssl.c | 3 +
src/interfaces/libpq/fe-connect.c | 113 +++++++++++++++++++++++++
src/interfaces/libpq/fe-secure-openssl.c | 89 +++++++++++++++++++
src/interfaces/libpq/libpq-int.h | 2 +
src/test/ssl/t/001_ssltests.pl | 23 ++++-
7 files changed, 284 insertions(+), 2 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Amit Kapila 2020-01-28 02:24:55 pgsql: Added relation name in error messages for constraint checks.
Previous Message Thomas Munro 2020-01-28 00:46:51 pgsql: Remove dependency on HeapTuple from predicate locking functions.