Postgres Pro
Downloads
Home   >   mailing lists

TLS 1.0 - Mailing list pgsql-general

From Ehtesham Pradhan
Subject TLS 1.0
Date
Msg-id CAMr8OH9u+RT7BbhZM4+BKf_aZDtM0Ku+EZJsoWWArHweqRyV0w@mail.gmail.com
Whole thread Raw
Responses Re: TLS 1.0  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Tree view
Hi Team,

Our client is using  Version : PostgreSQL 9.6.17 , they have done vulnerability assessment and found that :

  • TLS version 1.0 Protocol detection
  • The remote service encrypt traffic with older version of TLS
We suggested the below changes in PostgresSQL.conf

ssl_ciphers = 'HIGH:!aNULL'      OR  ssl_ciphers = 'HIGH:TLSv1.2:!aNULL'  
ssl_prefer_server_ciphers = on  
ssl_ecdh_curve = 'prime256v1'  
  
But the scan report is still the same. Can you please guide with the configuration in the present Postgres version to remediate it.

Thanks

pgsql-general by date:

Previous
From: hubert depesz lubaczewski
Date:
Subject: Re: psql's default database on connect (our internal ref. SRP-30861)
Next
From: Tom Lane
Date:
Subject: Re: psql's default database on connect (our internal ref. SRP-30861)