diff options
author | Daniel Gustafsson <dgustafsson@postgresql.org> | 2025-03-18 15:26:27 +0100 |
---|---|---|
committer | Daniel Gustafsson <dgustafsson@postgresql.org> | 2025-03-18 15:26:27 +0100 |
commit | daa02c6bd9262adeb44f4a9ed9d94fa6259afd94 (patch) | |
tree | 8ea66172e793587a84eb8619fd2ad82595daddc8 /doc/src | |
parent | 4fd02bf7cf94c3b6807dcf0b13e076de94f1e4ff (diff) | |
download | postgresql-daa02c6bd9262adeb44f4a9ed9d94fa6259afd94.tar.gz postgresql-daa02c6bd9262adeb44f4a9ed9d94fa6259afd94.zip |
Add X25519 to the default set of curves
Since many clients default to the X25519 curve in the TLS handshake,
the fact that the server by defualt doesn't support it cause an extra
roundtrip for each TLS connection. By adding multiple curves, which
is supported since 3d1ef3a15c3eb68da, we can reduce the risk of extra
roundtrips.
Author: Daniel Gustafsson <daniel@yesql.se>
Co-authored-by: Jacob Champion <jacob.champion@enterprisedb.com>
Reported-by: Andres Freund <andres@anarazel.de>
Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com>
Discussion: https://postgr.es/m/20240616234612.6cslu7nqexquvwj7@awork3.anarazel.de
Diffstat (limited to 'doc/src')
-rw-r--r-- | doc/src/sgml/config.sgml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml index 6cd190ac1a0..42e96b96f21 100644 --- a/doc/src/sgml/config.sgml +++ b/doc/src/sgml/config.sgml @@ -1520,7 +1520,7 @@ include_dir 'conf.d' It does not need to be the same curve used by the server's Elliptic Curve key. This parameter can only be set in the <filename>postgresql.conf</filename> file or on the server command line. - The default is <literal>prime256v1</literal>. + The default is <literal>X25519:prime256v1</literal>. </para> <para> |