PostgreSQL version 12 added a new ssl_min_protocol_version configuration
option to control the SSL versions the server uses.
When testing I also discovered that PostgreSQL rejects an empty
ssl_ciphers value, so I've wrapped this in an if to prevent it being
output if ciphers is empty (modern profile).
PostgreSQL version 12 added a new ssl_min_protocol_version configuration option to control the SSL versions the server uses.
When testing I also discovered that PostgreSQL rejects an empty ssl_ciphers value, so I've wrapped this in an if to prevent it being output if ciphers is empty (modern profile).