|
6 | 6 |
|
7 | 7 | <formalpara>
|
8 | 8 | <title>Release date:</title>
|
9 |
| - <para>2017-??-?? (current as of 2017-07-09, commit 3381898f9)</para> |
| 9 | + <para>2017-??-?? (current as of 2017-08-05, commit eccead9ed)</para> |
10 | 10 | </formalpara>
|
11 | 11 |
|
12 | 12 | <sect2>
|
|
412 | 412 | -->
|
413 | 413 | <para>
|
414 | 414 | Add configuration option <xref linkend="guc-ssl-dh-params-file"> to
|
415 |
| - specify filename for custom OpenSSL DH parameters (Heikki Linnakangas) |
| 415 | + specify file name for custom OpenSSL DH parameters (Heikki Linnakangas) |
416 | 416 | </para>
|
417 | 417 |
|
418 | 418 | <para>
|
419 |
| - This replaces the hardcoded, undocumented <filename>dh1024.pem</> |
420 |
| - filename. Note that <filename>dh1024.pem</> is no longer used by default; |
421 |
| - you must set the option to use custom DH parameters. |
| 419 | + This replaces the hardcoded, undocumented file |
| 420 | + name <filename>dh1024.pem</>. Note that <filename>dh1024.pem</> is |
| 421 | + no longer examined by default; you must set this option to use custom |
| 422 | + DH parameters. |
422 | 423 | </para>
|
423 | 424 | </listitem>
|
424 | 425 |
|
|
427 | 428 | 2017-07-31 [c0a15e07c] Always use 2048 bit DH parameters for OpenSSL ephemeral
|
428 | 429 | -->
|
429 | 430 | <para>
|
430 |
| - Increase the size of DH parameters used for OpenSSL ephemeral DH ciphers |
431 |
| - to 2048 bits (Heikki Linnakangas) |
| 431 | + Increase the size of the default DH parameters used for OpenSSL |
| 432 | + ephemeral DH ciphers to 2048 bits (Heikki Linnakangas) |
432 | 433 | </para>
|
433 | 434 |
|
434 | 435 | <para>
|
435 |
| - The size of the compiled-in DH parameters has been increased from 1024 |
436 |
| - to 2048 bits, making DH key exchange more resistent to a brute-force |
437 |
| - attack. However, some old SSL implementations, notably some revisions of |
438 |
| - Java Runtime Environment version 6, will not accept DH parameters longer |
439 |
| - than 1024 bits, and will not be able to connect over SSL. As a |
440 |
| - work-around, you can use custom 1024-bit DH parameters, instead of the |
441 |
| - compiled-in defaults. See <xref linkend="guc-ssl-dh-params-file"> for |
442 |
| - information on using custom DH parameters. |
| 436 | + The size of the compiled-in DH parameters has been increased from |
| 437 | + 1024 to 2048 bits, making DH key exchange more resistant to |
| 438 | + brute-force attacks. However, some old SSL implementations, notably |
| 439 | + some revisions of Java Runtime Environment version 6, will not accept |
| 440 | + DH parameters longer than 1024 bits, and hence will not be able to |
| 441 | + connect over SSL. If it's necessary to support such old clients, you |
| 442 | + can use custom 1024-bit DH parameters instead of the compiled-in |
| 443 | + defaults. See <xref linkend="guc-ssl-dh-params-file">. |
| 444 | + </para> |
| 445 | + </listitem> |
| 446 | + |
| 447 | + <listitem> |
| 448 | +<!-- |
| 449 | +2017-08-04 [c30f1770a] Apply ALTER ... SET NOT NULL recursively in ALTER ... AD |
| 450 | +--> |
| 451 | + <para> |
| 452 | + When <command>ALTER TABLE ... ADD PRIMARY KEY</> marks |
| 453 | + columns <literal>NOT NULL</>, that change now propagates to |
| 454 | + inheritance child tables as well (Michael Paquier) |
443 | 455 | </para>
|
444 | 456 | </listitem>
|
445 | 457 |
|
|
454 | 466 | <para>
|
455 | 467 | This module provided compatibility with the version of full text
|
456 | 468 | search that shipped in pre-8.3 <productname>PostgreSQL</> releases.
|
457 |
| - </para> |
| 469 | + </para> |
458 | 470 | </listitem>
|
459 | 471 |
|
460 | 472 | <listitem>
|
|
887 | 899 | <listitem>
|
888 | 900 | <!--
|
889 | 901 | 2017-03-25 [b8d7f053c] Faster expression evaluation and targetlist projection.
|
| 902 | +2017-07-30 [cc9f08b6b] Move ExecProcNode from dispatch to function pointer base |
890 | 903 | -->
|
891 | 904 | <para>
|
892 |
| - Reduce expression evaluation overhead during query execution (Andres |
893 |
| - Freund) |
| 905 | + Reduce expression evaluation overhead during query execution, |
| 906 | + as well as plan node calling overhead (Andres Freund) |
894 | 907 | </para>
|
895 | 908 |
|
896 | 909 | <para>
|
|
2109 | 2122 | <!--
|
2110 | 2123 | 2016-11-03 [274bb2b38] libpq: Allow connection strings and URIs to specify mult
|
2111 | 2124 | 2017-05-19 [5f374fe7a] libpq: Try next host if one of them times out.
|
| 2125 | +2017-07-10 [7b02ba62e] Allow multiple hostaddrs to go with multiple hostnames. |
2112 | 2126 | -->
|
2113 | 2127 | <para>
|
2114 |
| - Allow specification of <link |
2115 |
| - linkend="libpq-connect-host">multiple host names</> in libpq |
2116 |
| - connection strings and URIs |
2117 |
| - (Robert Haas) |
| 2128 | + Allow specification of <link linkend="libpq-connect-host">multiple |
| 2129 | + host names or addresses</> in libpq connection strings and URIs |
| 2130 | + (Robert Haas, Heikki Linnakangas) |
2118 | 2131 | </para>
|
2119 | 2132 |
|
2120 | 2133 | <para>
|
|
0 commit comments