Thread: pgsql: Update and clarify ssl_ciphers default

pgsql: Update and clarify ssl_ciphers default

From
Peter Eisentraut
Date:
Update and clarify ssl_ciphers default

- Write HIGH:MEDIUM instead of DEFAULT:!LOW:!EXP for clarity.
- Order 3DES last to work around inappropriate OpenSSL default.
- Remove !MD5 and @STRENGTH, because they are irrelevant.
- Add clarifying documentation.

Effectively, the new default is almost the same as the old one, but it
is arguably easier to understand and modify.

Author: Marko Kreen <markokr@gmail.com>

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/32001ab0b7b4ee143e195f100543f531757a555b

Modified Files
--------------
doc/src/sgml/config.sgml                      |   65 +++++++++++++++++++++++--
src/backend/utils/misc/guc.c                  |    2 +-
src/backend/utils/misc/postgresql.conf.sample |    2 +-
3 files changed, 64 insertions(+), 5 deletions(-)