ssl_prefer_server_ciphers

Type: bool
Default: on
Context: sighup
Restart: false
Since: 9.4

Specifies whether to use the server's SSL cipher preferences, rather than the client's. This parameter can only be set in the postgresql.conf file or on the server command line. The default is on.

PostgreSQL versions before 9.4 do not have this setting and always use the client's preferences. This setting is mainly for backward compatibility with those versions. Using the server's preferences is usually better because it is more likely that the server is appropriately configured.

Recommendations

According to your SSL configuration, which maybe provided by your installer.

On pgsql-hackers

Comments