On 2019-11-29 16:30, Tom Lane wrote:
Michael Paquier <mich...@paquier.xyz> writes:
On Fri, Nov 29, 2019 at 01:40:48PM +0100, Magnus Hagander wrote:
+1. As long as we still have support to change it down if needed, it's a
good thing to ship with a proper default.
+1.
What's the impact going to be on buildfarm members with older openssl
installations? Perhaps "none", if they aren't running the ssl test
suite, but we should be clear about it.
If they aren't running the ssl tests, then none.
We could add an override of ssl_min_protocol_version in
src/test/ssl/t/SSLServer.pm so that the tests still work with very old
OpenSSL versions by default. That might be a good idea.
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
