Back-patch 9.4-era SSL renegotiation code into 9.3 and 9.2. This back-patches 9.4 commits 31cf1a1a4, 86029b31e, and 36a3be654 into the prior branches, along with relevant bits of b1aebbb6a and 7ce2a45ae. We had foreseen doing this once the code was proven, but that never did happen, probably because we got sufficiently fed up with renegotiation to disable it by default. However, we have to do something now because the prior code doesn't even compile against OpenSSL 1.1. Per discussion, the best solution seems to be to make the older branches look like 9.4.
Discussion: https://postgr.es/m/20047.1492305...@sss.pgh.pa.us Branch ------ REL9_2_STABLE Details ------- http://git.postgresql.org/pg/commitdiff/58384149bdbd47aab4affb926b32f16a84ef98ce Modified Files -------------- src/backend/libpq/be-secure.c | 87 ++++++++++++++++++++++++++++++++++--------- src/backend/tcop/postgres.c | 6 +++ 2 files changed, 76 insertions(+), 17 deletions(-) -- Sent via pgsql-committers mailing list (pgsql-committers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-committers
