Re:Re: Re: Add support to TLS 1.3 cipher suites and curves lists - Mailing list pgsql-hackers

From Erica Zhang
Subject Re:Re: Re: Add support to TLS 1.3 cipher suites and curves lists
Date
Msg-id tencent_7B70F1A73E04F13A531DF3285143CE45DE06@qq.com
Whole thread Raw
In response to Add support to TLS 1.3 cipher suites and curves lists  ("Erica Zhang" <ericazhangy2021@qq.com>)
Responses Re: Re: Re: Add support to TLS 1.3 cipher suites and curves lists
List pgsql-hackers

Hi Michael and Peter,
Thanks a lot for the elaboration of the patch process for PG17.  It's really unfortunate missing the the development cycle of PG17.
Just some context of why we hurry to try to catch up with PG17.

There are certain government, financial and other enterprise organizations that have very strict requirements about the encrypted communication and more specifically about fine grained params like the TLS ciphers and curves that they use. The default ones for those customers are not acceptable. Any products that integrate Postgres and requires encrypted communication with the Postgres would have to fulfil those requirements.

So if we can have this patch in the upcoming new major version, that means Postgres users who have similar requirements can upgrade to PG17.

Thanks!


Original Email

Sender:"Michael Paquier"< michael@paquier.xyz >;

Sent Time:2024/6/7 18:46

To:"Erica Zhang"< ericazhangy2021@qq.com >;

Cc recipient:"Peter Eisentraut"< peter@eisentraut.org >;"pgsql-hackers"< pgsql-hackers@lists.postgresql.org >;

Subject:Re: Re: Add support to TLS 1.3 cipher suites and curves lists


On Fri, Jun 07, 2024 at 06:02:37PM +0800, Erica Zhang wrote:
> I see the https://commitfest.postgresql.org/48/ is still open, could
> it be possible to target for PG17? As I know PG17 is going to be
> release this year so that we can upgrade our instances to this new
> version accodingly.

Echoing with Peter, https://commitfest.postgresql.org/48/ is planned
to be the first commit fest of the development cycle for Postgres 18.
v17 is in feature freeze state and beta, where only bug fixes are
accepted, and not new features.
--
Michael

pgsql-hackers by date:

Previous
From: Kyotaro Horiguchi
Date:
Subject: Re: 001_rep_changes.pl fails due to publisher stuck on shutdown
Next
From: Peter Smith
Date:
Subject: Re: Skip collecting decoded changes of already-aborted transactions