Re: should libpq also require TLSv1.2 by default? - Mailing list pgsql-hackers

From Tom Lane
Subject Re: should libpq also require TLSv1.2 by default?
Date
Msg-id 2244433.1593053439@sss.pgh.pa.us
Whole thread Raw
In response to Re: should libpq also require TLSv1.2 by default?  (Michael Paquier <michael@paquier.xyz>)
Responses Re: should libpq also require TLSv1.2 by default?  (Michael Paquier <michael@paquier.xyz>)
List pgsql-hackers
Michael Paquier <michael@paquier.xyz> writes:
> On Thu, Jun 25, 2020 at 12:30:03AM +0200, Daniel Gustafsson wrote:
>> As mentioned elsewhere in the thread, maybe this is also something which can be
>> done more easily if we improve the error reporting?  Right now it's fairly
>> cryptic IMO.

> This part may be tricky to get right I think, because the error comes
> directly from OpenSSL when negotiating the protocol used between the
> client and the server, like "no protocols available" or such.

Can we do something comparable to the backend's HINT protocol, where
we add on a comment that's only mostly-likely to be right?

            regards, tom lane



pgsql-hackers by date:

Previous
From: Fujii Masao
Date:
Subject: Re: Assertion failure in pg_copy_logical_replication_slot()
Next
From: Bharath Rupireddy
Date:
Subject: Re: Parallel copy