Re: [PATCH] add ssl_protocols configuration option - Mailing list pgsql-hackers

Dag-Erling Smørgrav <des@des.no> writes:

> Alex Shulgin <ash@commandprompt.com> writes:
>> I can do that too, just need a hint where to look at in libpq/psql to
>> add the option.
>
> The place to *enforce* the option is src/interfaces/libpq/fe-secure.c
> (look for SSLv23_method() and SSL_CTX_set_options()).  I haven't looked
> into how to set it.

Yes, I've figured it out.  Guess we'd better share the ssl_protocol
value parser code between libpq and the backend.  Any precedent?

--
Alex