On 01/16/2015 08:30 AM, Tom Lane wrote:
Maciek Sakrejda <maciek@xxxxxxxxxx> writes:
I'm having a hard time getting SSL compression working (or even figuring
out why it's not working) with my local Postgres server. The setting [1] is
documented to default to on, but according to the banner when I connect
with psql, it's off.
Possibly you have the same type of problem mentioned here:
http://www.postgresql.org/message-id/CABUevEytxEQtbMeuKpJ8tYjeeB37mzDQ7BASzEZN6EgcGrdZxA@xxxxxxxxxxxxxx
Yes that would seem to be the issue:
https://launchpad.net/ubuntu/trusty/+source/openssl/+changelog
openssl (1.0.1e-3ubuntu1)
Disable compression to avoid CRIME systemwide (CVE-2012-4929).
although Ubuntu may well have done it a bit differently than Red Hat,
ie the way to override openssl's default behavior might be different.
regards, tom lane
--
Adrian Klaver
adrian.klaver@xxxxxxxxxxx
--
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general
