postgresql17/postgresql-default-ssl-config.patch
Pavol Sloboda 58cdad4cd5 Modified the postgresql configuration to have the ssl_ciphers set to
'PROFILE=SYSTEM' after installation, while still keeping the default as
it was before: 'HIGH:MEDIUM:+3DES:!aNULL'

Related: RHEL-144930
2026-05-12 12:10:14 +02:00

12 lines
704 B
Diff

diff -Naur postgresql-17.9/src/backend/utils/misc/postgresql.conf.sample postgresql-17.9_patched/src/backend/utils/misc/postgresql.conf.sample
--- postgresql-17.9/src/backend/utils/misc/postgresql.conf.sample 2026-02-23 22:58:47.000000000 +0100
+++ postgresql-17.9_patched/src/backend/utils/misc/postgresql.conf.sample 2026-05-12 11:35:30.531633102 +0200
@@ -110,7 +110,7 @@
#ssl_crl_file = ''
#ssl_crl_dir = ''
#ssl_key_file = 'server.key'
-#ssl_ciphers = 'HIGH:MEDIUM:+3DES:!aNULL' # allowed SSL ciphers
+ssl_ciphers = 'PROFILE=SYSTEM' # allowed SSL ciphers, default: 'HIGH:MEDIUM:+3DES:!aNULL'
#ssl_prefer_server_ciphers = on
#ssl_ecdh_curve = 'prime256v1'
#ssl_min_protocol_version = 'TLSv1.2'