(see Chapter 17). The terms SSL and TLS are often used interchangeably to mean a secure encrypted connection using a TLS protocol. SSL protocols are the precursors to TLS protocols, and the term SSL is still interchangeably with TLS in PostgreSQL. 18.9.1. Basic Setup With SSL support compiled in, the PostgreSQL server can be started with support for encrypted connec- tions using TLS protocols enabled by transfer encryption using TLS protocols are named ssl for historic reasons, even though support for the SSL protocol has been deprecated. SSL is in this context used interchangeably with TLS. ssl (boolean)

(see Chapter 17). The terms SSL and TLS are often used interchangeably to mean a secure encrypted connection using a TLS protocol. SSL protocols are the precursors to TLS protocols, and the term SSL is still interchange- ably with TLS in PostgreSQL. 18.9.1. Basic Setup With SSL support compiled in, the PostgreSQL server can be started with support for encrypted con- nections using TLS protocols enabled by encryption using TLS protocols are named ssl for historic reasons, even though sup- port for the SSL protocol has been deprecated. SSL is in this context used interchangeably with TLS. ssl (boolean)

(see Chapter 17). The terms SSL and TLS are often used interchangeably to mean a secure encrypted connection using a TLS protocol. SSL protocols are the precursors to TLS protocols, and the term SSL is still interchangeably with TLS in PostgreSQL. 19.9.1. Basic Setup With SSL support compiled in, the PostgreSQL server can be started with support for encrypted connec- tions using TLS protocols enabled by transfer encryption using TLS protocols are named ssl for historic reasons, even though support for the SSL protocol has been deprecated. SSL is in this context used interchangeably with TLS. 643 Server Configuration

(see Chapter 17). The terms SSL and TLS are often used interchangeably to mean a secure encrypted connection using a TLS protocol. SSL protocols are the precursors to TLS protocols, and the term SSL is still interchange- ably with TLS in PostgreSQL. 19.9.1. Basic Setup With SSL support compiled in, the PostgreSQL server can be started with support for encrypted con- nections using TLS protocols enabled by encryption using TLS protocols are named ssl for historic reasons, even though sup- port for the SSL protocol has been deprecated. SSL is in this context used interchangeably with TLS. ssl (boolean)

(see Chapter 17). The terms SSL and TLS are often used interchangeably to mean a secure encrypted connection using a TLS protocol. SSL protocols are the precursors to TLS protocols, and the term SSL is still interchangeably with TLS in PostgreSQL. 19.9.1. Basic Setup With SSL support compiled in, the PostgreSQL server can be started with support for encrypted connec- tions using TLS protocols enabled by transfer encryption using TLS protocols are named ssl for historic reasons, even though support for the SSL protocol has been deprecated. SSL is in this context used interchangeably with TLS. ssl (boolean)

of supported values. Only connections using TLS version 1.2 and lower are affected. There is currently no setting that con- trols the cipher choices used by TLS version 1.3 connections. The default value command openssl ecparam -list_curves. Not all of them are usable in TLS though. ssl_min_protocol_version (enum) Sets the minimum SSL/TLS protocol version to use. Valid values are currently: TLSv1, TLSv1 all values; an error will be raised if an unsupported setting is chosen. Protocol versions before TLS 1.0, namely SSL version 2 and 3, are always disabled. The default is TLSv1.2, which satisfies industry

(see Chapter 17). The terms SSL and TLS are often used interchangeably to mean a secure encrypted connection using a TLS protocol. SSL protocols are the precursors to TLS protocols, and the term SSL is still interchange- ably with TLS in PostgreSQL. 19.9.1. Basic Setup With SSL support compiled in, the PostgreSQL server can be started with support for encrypted con- nections using TLS protocols enabled by encryption using TLS protocols are named ssl for historic reasons, even though sup- port for the SSL protocol has been deprecated. SSL is in this context used interchangeably with TLS. ssl (boolean)

of supported values. Only connections using TLS version 1.2 and lower are affected. There is currently no setting that controls the cipher choices used by TLS version 1.3 connections. The default value command openssl ecparam -list_curves. Not all of them are usable in TLS though. ssl_min_protocol_version (enum) Sets the minimum SSL/TLS protocol version to use. Valid values are currently: TLSv1, TLSv1 all val- ues; an error will be raised if an unsupported setting is chosen. Protocol versions before TLS 1.0, namely SSL version 2 and 3, are always disabled. The default is TLSv1.2, which satisfies industry

of supported values. Only connections using TLS version 1.2 and lower are affected. There is currently no setting that con- trols the cipher choices used by TLS version 1.3 connections. The default value command openssl ecparam -list_curves. Not all of them are usable in TLS though. ssl_min_protocol_version (enum) Sets the minimum SSL/TLS protocol version to use. Valid values are currently: TLSv1, TLSv1 all values; an error will be raised if an unsupported setting is chosen. Protocol versions before TLS 1.0, namely SSL version 2 and 3, are always disabled. The default is TLSv1.2, which satisfies industry

of supported values. Only connections using TLS version 1.2 and lower are affected. There is currently no setting that controls the cipher choices used by TLS version 1.3 connections. The default value command openssl ecparam -list_curves. Not all of them are usable in TLS though. ssl_min_protocol_version (enum) Sets the minimum SSL/TLS protocol version to use. Valid values are currently: TLSv1, TLSv1 all val- ues; an error will be raised if an unsupported setting is chosen. Protocol versions before TLS 1.0, namely SSL version 2 and 3, are always disabled. The default is TLSv1.2, which satisfies industry