diff options
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/config.sgml | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml index bbe1eb0d19a..e900dccb11c 100644 --- a/doc/src/sgml/config.sgml +++ b/doc/src/sgml/config.sgml @@ -1034,35 +1034,6 @@ include_dir 'conf.d' </listitem> </varlistentry> - <varlistentry id="guc-ssl-renegotiation-limit" xreflabel="ssl_renegotiation_limit"> - <term><varname>ssl_renegotiation_limit</varname> (<type>integer</type>) - <indexterm> - <primary><varname>ssl_renegotiation_limit</> configuration parameter</primary> - </indexterm> - </term> - <listitem> - <para> - Specifies how much data can flow over an <acronym>SSL</>-encrypted - connection before renegotiation of the session keys will take - place. Renegotiation decreases an attacker's chances of doing - cryptanalysis when large amounts of traffic can be examined, but it - also carries a large performance penalty. The sum of sent and received - traffic is used to check the limit. If this parameter is set to 0, - renegotiation is disabled. The default is <literal>512MB</>. - </para> - <note> - <para> - SSL libraries from before November 2009 are insecure when using SSL - renegotiation, due to a vulnerability in the SSL protocol. As a - stop-gap fix for this vulnerability, some vendors shipped SSL - libraries incapable of doing renegotiation. If any such libraries - are in use on the client or server, SSL renegotiation should be - disabled. - </para> - </note> - </listitem> - </varlistentry> - <varlistentry id="guc-ssl-ciphers" xreflabel="ssl_ciphers"> <term><varname>ssl_ciphers</varname> (<type>string</type>) <indexterm> |