Thread: Re: [GENERAL] OpeSSL - PostgreSQL

Re: [GENERAL] OpeSSL - PostgreSQL

From
John R Pierce
Date:
On 11/9/2017 1:59 PM, chiru r wrote:
>
> How to configure the PostgreSQL to allow specif cipher suites from 
> different client applications?

see https://www.postgresql.org/docs/9.5/static/ssl-tcp.html


-- 
john r pierce, recycling bits in santa cruz



-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Re: [GENERAL] OpeSSL - PostgreSQL

From
Tom Lane
Date:
John R Pierce <pierce@hogranch.com> writes:
> On 11/9/2017 1:59 PM, chiru r wrote:
>> How to configure the PostgreSQL to allow specif cipher suites from 
>> different client applications?

> see https://www.postgresql.org/docs/9.5/static/ssl-tcp.html

Note that while you can adjust ssl_ciphers, it's a postmaster-wide
setting; there is not a provision for letting it be set per-user.
Since the SSL handshake necessarily occurs before we find out which
user is trying to connect, it'd be hard to do differently.
        regards, tom lane


-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general