Support configuring TLSv1.3 cipher suites
The ssl_ciphers GUC can only set cipher suites for TLSv1.2, and lower,
connections. For TLSv1.3 connections a different OpenSSL API must be
used. This adds a new GUC, ssl_tls13_ciphers, which can be used to
configure a colon separated list of cipher suites to support when
performing a TLSv1.3 handshake.
Original patch by Erica Zhang with additional hacking by me.
Author: Erica Zhang
Author: Daniel Gustafsson
Reviewed-by: Jacob Champion
Reviewed-by: Andres Freund
Reviewed-by: Peter Eisentraut
Reviewed-by: Jelte Fennema-Nio
Discussion: https://postgr.es/m/[email protected]