# ssl_library

> ssl_library shows the name of the SSL library. It is read-only metadata in PG12–18, not a runtime tuning control.
---

> [!NOTE]
> **Fact — official short description:** “Shows the name of the SSL library.”

## Identity {#identity}

| Field | Value | Meaning |
| --- | --- | --- |
| Type | `string` | Upstream pg_settings type |
| Context | `internal` | Internal/preset and not user-settable |
| Unit | — | Raw unit |
| Range | — | Raw limits in the last observed version |
| Enum values | — | — for non-enum types |
| Category | Preset Options | Upstream classification |
| Latest boot value | `OpenSSL` | OpenSSL |
{.fields meta="-"}

## Lifecycle {#lifecycle}

| Fact | Value |
| --- | --- |
| First observed | PG12 |
| Present in | PG12–19 Beta 3 |
| Removed in | No |
| Introduction commit | [`98efa76fe313`](https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=98efa76fe313f62f84b94cd1f46c913c221b41fe) — Add ssl_library preset parameter |
| Commit date | 2018-06-26 |
| Discussion | — |

## Default history {#default-history}

| Versions | Raw `boot_val` | Unit | Human value |
| --- | --- | --- | --- |
| PG12–19 Beta 3 | `OpenSSL` | — | OpenSSL |
{.full-width caption="Measured PG9.0–19 Beta 3 boot defaults"}

## How it works {#mechanism}

Shows the name of the SSL library. It is read-only and cannot be changed with SET or configuration-file edits.

It reports the SSL implementation linked into the server, which helps diagnose provider-specific TLS behavior.

Interpret it with server_version, server_version_num, server_encoding. Applications and operations tooling may read ssl_library for capability or environment detection, but cannot SET it; cross-cluster comparisons must account for build, initdb, and current-database differences.

## Tuning advice {#tuning-advice}

> [!TIP]
> **Advice.** These are workload-specific starting points and must be validated with measurements.

| Workload | Guidance |
| --- | --- |
| OLTP | Not tunable. Record ssl_library as a deployment/capability fact; if it is unexpected, fix the binary, initdb, or database-creation process rather than trying SET. |
| OLAP | Not tunable. Use ssl_library to verify format, build, or resource assumptions on analytical nodes and keep every read/write candidate compatible. |
| Small nodes | Not tunable. Preserve it in inventory and incident reports; do not custom-build or rebuild merely to change it without a demonstrated compatibility need. |
{.full-width}

## Pigsty {#pigsty}

Values use the fixed 8-vCPU, 32-GiB, 100-GiB SSD fixture and render the current Pigsty templates for PG19 Beta 3; this does not assert current Pigsty support for that historical or beta release.

| Template | Effective value | Versus upstream boot | Source expression |
| --- | --- | --- | --- |
| OLTP | Unmodified | — | — |
| OLAP | Unmodified | — | — |
| CRIT | Unmodified | — | — |
| TINY | Unmodified | — | — |
{.full-width}

> [!CAUTION]
> **Advice — pending human review.** Fact from the current Pigsty template projection: OLTP: PG12–19 Beta 3 unmodified; OLAP: PG12–19 Beta 3 unmodified; CRIT: PG12–19 Beta 3 unmodified; TINY: PG12–19 Beta 3 unmodified. No Pigsty-specific rationale is inferred from an absent override.

## Common pitfalls {#common-pitfalls}

- Trying to change read-only ssl_library with SET or a configuration file.
- Assuming every cluster, database, or vendor build reports the same value.
- Ignoring the value in file-format or feature-compatibility checks.
- Treating reported metadata as a performance target instead of an environment fact.

## Related parameters {#related-parameters}

[`server_version`](/parameters/server-version/) · [`server_version_num`](/parameters/server-version-num/) · [`server_encoding`](/parameters/server-encoding/) · [`integer_datetimes`](/parameters/integer-datetimes/) · [`debug_assertions`](/parameters/debug-assertions/) · [`block_size`](/parameters/block-size/)

## References {#references}

- [PostgreSQL 19 Beta 3 — ssl_library](https://www.postgresql.org/docs/19/runtime-config-preset.html#GUC-SSL-LIBRARY)
- [PostgreSQL 19 release notes](https://www.postgresql.org/docs/19/release-19.html)
- [Machine-readable GUC export](/data/guc.jsonl)