SSL renegotiation

8 views
Skip to first unread message

adam...@spottedfoobar.com

unread,
Jul 22, 2021, 7:58:09 PM7/22/21
to imposm
Is this still an issue?

  • Note: TLS/SSL support is disabled by default due to the lack of renegotiation support in Go's TLS implementation. You can re-enable encryption by setting the PGSSLMODE environment variable or the sslmode connection option to require or verify-full, eg: -connect postgis://host/dbname?sslmode=require. You will need to disable renegotiation support on your server to prevent connection errors on larger imports. You can do this by setting ssl_renegotiation_limit to 0 in your PostgreSQL server configuration.
It looks like Postgres turned off ssl_renegotiation back in 2015 and the server parameter no longer exists or is deprecated.

regards,
Adam Glass
Reply all
Reply to author
Forward
0 new messages