encrypted client connections. <productname>OpenSSL</productname> is

also required for random number generation on platforms that do not

have <filename>/dev/urandom</filename> (except Windows). The minimum

version required is0.9.8.

version required is1.0.1.

</para>

</listitem>

compression by default, and many operating system distributions

disable it in prior versions as well, so setting this parameter to on

will not have any effect if the server does not accept compression.

On the other hand, <productname>OpenSSL</productname> before 1.0.0

does not support disabling compression, so this parameter is ignored

with those versions, and whether compression is used depends on the

server.

</para>

<para>

}

SSL_CTX_set_options(context,SSL_OP_NO_TICKET);

SSL_CTX_set_session_cache_mode(context,SSL_SESS_CACHE_OFF);

SSL_set_verify(conn->ssl,SSL_VERIFY_PEER,verify_cb);

if (conn->sslcompression&&conn->sslcompression[0]=='0')

SSL_set_options(conn->ssl,SSL_OP_NO_COMPRESSION);

SSL_clear_options(conn->ssl,SSL_OP_NO_COMPRESSION);

return0;

}

print$conf"listen_addresses='$serverhost'\n";

print$conf"log_statement=all\n";

print$conf"ssl_min_protocol_version='TLSv1'\n";

print$conf"include 'sslconfig.conf'\n";