Put back ssl_renegotiation_limit parameter, but only allow 0.
authorRobert Haas <[email protected]>
Tue, 20 Oct 2015 13:56:04 +0000 (09:56 -0400)
committerRobert Haas <[email protected]>
Tue, 20 Oct 2015 13:59:39 +0000 (09:59 -0400)
commitb06f1f286d5b9beb10cf7dc365cdb7150064e191
treed974e12bc6fae58ca2fae5ac0367a6614e52733f
parented6c516728c695477c5b6140ce80bc12641f72e2
Put back ssl_renegotiation_limit parameter, but only allow 0.

Per a report from Shay Rojansky, Npgsql sends ssl_renegotiation_limit=0
in the startup packet because it does not support renegotiation; other
clients which have not attempted to support renegotiation might well
behave similarly.  The recent removal of this parameter forces them to
break compatibility with either current PostgreSQL versions, or
previous ones.  Per discussion, the best solution is to accept the
parameter but only allow a value of 0.

Shay Rojansky, edited a little by me.
src/backend/utils/misc/guc.c