Wiki / Configuration Parameters
ssl_dh_params_file
Specifies the name of the file containing Diffie-Hellman parameters used for so-called ephemeral DH family of SSL ciphers. The default is empty, in which case compiled-in default DH parameters used. Using custom DH parameters reduces the exposure if an attacker manages to crack the well-known compiled-in DH parameters. You can create your own DH parameters file with the command openssl dhparam -out dhparams.pem 2048. This parameter can only be set in the postgresql.conf file or on the server command line.
English manual coverage begins with PostgreSQL 7.4. Source history and runtime observations have their own recorded version boundaries.
Reading PG 18·Select a recorded version
- boot val
- Unknown
- category
- Connections and Authentication / SSL
- context
- sighup
- documented
- true
- enumvals
- Unknown
- extra desc
- An empty string means use compiled-in default parameters.
- lang
- en
- max val
- Unknown
- metadata version
- 18
- min val
- Unknown
- name
- ssl_dh_params_file
- short desc
- Location of the SSL DH parameters file.
- source
- pg-settings-source-snapshot
- unit
- Unknown
- vartype
- string
Definition PG 18
Specifies the name of the file containing Diffie-Hellman parameters used for so-called ephemeral DH family of SSL ciphers. The default is empty, in which case compiled-in default DH parameters used. Using custom DH parameters reduces the exposure if an attacker manages to crack the well-known compiled-in DH parameters. You can create your own DH parameters file with the command openssl dhparam -out dhparams.pem 2048. This parameter can only be set in the postgresql.conf file or on the server command line.
Compare versions
Source references
Full definition and evidence JSON
Definition sources
center · PostgreSQL 18 · wiki-repair-20261023:ac742661e1ad7586f2f38ea64188c6fefb10d4cacda2fe9d14afba41aa3f6bbc
Text language: en · wiki-repair-20261023:ac742661e1ad7586f2f38ea64188c6fefb10d4cacda2fe9d14afba41aa3f6bbc