Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Commit edfc086

Browse filesBrowse files
committed
doc: Document that ssl_ciphers does not affect TLS 1.3
TLS 1.3 uses a different way of specifying ciphers and a different OpenSSL API. PostgreSQL currently does not support setting those ciphers. For now, just document this. In the future, support for this might be added somehow. Reviewed-by: Jonathan S. Katz <jkatz@postgresql.org> Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us>
1 parent 47adb24 commit edfc086
Copy full SHA for edfc086

File tree

Expand file treeCollapse file tree

1 file changed

+8
-5
lines changed
Filter options
Expand file treeCollapse file tree

1 file changed

+8
-5
lines changed

‎doc/src/sgml/config.sgml

Copy file name to clipboardExpand all lines: doc/src/sgml/config.sgml
+8-5Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1056,11 +1056,14 @@ include_dir 'conf.d'
10561056
</term>
10571057
<listitem>
10581058
<para>
1059-
Specifies a list of <acronym>SSL</> cipher suites that are allowed to be
1060-
used on secure connections. See
1061-
the <citerefentry><refentrytitle>ciphers</></citerefentry> manual page
1062-
in the <application>OpenSSL</> package for the syntax of this setting
1063-
and a list of supported values. The default value is
1059+
Specifies a list of <acronym>SSL</> cipher suites that are
1060+
allowed to be used by SSL connections. See the
1061+
<citerefentry><refentrytitle>ciphers</></citerefentry>
1062+
manual page in the <application>OpenSSL</> package for the
1063+
syntax of this setting and a list of supported values. Only
1064+
connections using TLS version 1.2 and lower are affected. There is
1065+
currently no setting that controls the cipher choices used by TLS
1066+
version 1.3 connections. The default value is
10641067
<literal>HIGH:MEDIUM:+3DES:!aNULL</>. It is usually reasonable,
10651068
unless you have specific security requirements. This parameter can only
10661069
be set at server start.

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.