• Tom Lane's avatar
    Disallow use of SSL v3 protocol in the server as well as in libpq. · 326e1d73
    Tom Lane authored
    Commit 820f08ca claimed to make the server
    and libpq handle SSL protocol versions identically, but actually the server
    was still accepting SSL v3 protocol while libpq wasn't.  Per discussion,
    SSL v3 is obsolete, and there's no good reason to continue to accept it.
    So make the code really equivalent on both sides.  The behavior now is
    that we use the highest mutually-supported TLS protocol version.
    
    Marko Kreen, some comment-smithing by me
    326e1d73
fe-secure.c 43.2 KB