Re: [GENERAL] OpeSSL - PostgreSQL - Mailing list pgsql-general

From Tom Lane
Subject Re: [GENERAL] OpeSSL - PostgreSQL
Date
Msg-id 18856.1510266376@sss.pgh.pa.us
Whole thread Raw
In response to Re: [GENERAL] OpeSSL - PostgreSQL  (John R Pierce <pierce@hogranch.com>)
List pgsql-general
John R Pierce <pierce@hogranch.com> writes:
> On 11/9/2017 1:59 PM, chiru r wrote:
>> How to configure the PostgreSQL to allow specif cipher suites from 
>> different client applications?

> see https://www.postgresql.org/docs/9.5/static/ssl-tcp.html

Note that while you can adjust ssl_ciphers, it's a postmaster-wide
setting; there is not a provision for letting it be set per-user.
Since the SSL handshake necessarily occurs before we find out which
user is trying to connect, it'd be hard to do differently.
        regards, tom lane


-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

pgsql-general by date:

Previous
From: John R Pierce
Date:
Subject: Re: [GENERAL] OpeSSL - PostgreSQL
Next
From: Joe Conway
Date:
Subject: Re: [GENERAL] [HACKERS] OpeSSL - PostgreSQL