|
6 | 6 |
|
7 | 7 | <formalpara> |
8 | 8 | <title>Release date:</title> |
9 | | - <para>2017-??-?? (current as of 2017-07-09, commit 3381898f9)</para> |
| 9 | + <para>2017-??-?? (current as of 2017-08-05, commit eccead9ed)</para> |
10 | 10 | </formalpara> |
11 | 11 |
|
12 | 12 | <sect2> |
|
412 | 412 | --> |
413 | 413 | <para> |
414 | 414 | Add configuration option <xref linkend="guc-ssl-dh-params-file"> to |
415 | | - specify filename for custom OpenSSL DH parameters (Heikki Linnakangas) |
| 415 | + specify file name for custom OpenSSL DH parameters (Heikki Linnakangas) |
416 | 416 | </para> |
417 | 417 |
|
418 | 418 | <para> |
419 | | - This replaces the hardcoded, undocumented <filename>dh1024.pem</> |
420 | | - filename. Note that <filename>dh1024.pem</> is no longer used by default; |
421 | | - you must set the option to use custom DH parameters. |
| 419 | + This replaces the hardcoded, undocumented file |
| 420 | + name <filename>dh1024.pem</>. Note that <filename>dh1024.pem</> is |
| 421 | + no longer examined by default; you must set this option to use custom |
| 422 | + DH parameters. |
422 | 423 | </para> |
423 | 424 | </listitem> |
424 | 425 |
|
|
427 | 428 | 2017-07-31 [c0a15e07c] Always use 2048 bit DH parameters for OpenSSL ephemeral |
428 | 429 | --> |
429 | 430 | <para> |
430 | | - Increase the size of DH parameters used for OpenSSL ephemeral DH ciphers |
431 | | - to 2048 bits (Heikki Linnakangas) |
| 431 | + Increase the size of the default DH parameters used for OpenSSL |
| 432 | + ephemeral DH ciphers to 2048 bits (Heikki Linnakangas) |
432 | 433 | </para> |
433 | 434 |
|
434 | 435 | <para> |
435 | | - The size of the compiled-in DH parameters has been increased from 1024 |
436 | | - to 2048 bits, making DH key exchange more resistent to a brute-force |
437 | | - attack. However, some old SSL implementations, notably some revisions of |
438 | | - Java Runtime Environment version 6, will not accept DH parameters longer |
439 | | - than 1024 bits, and will not be able to connect over SSL. As a |
440 | | - work-around, you can use custom 1024-bit DH parameters, instead of the |
441 | | - compiled-in defaults. See <xref linkend="guc-ssl-dh-params-file"> for |
442 | | - information on using custom DH parameters. |
| 436 | + The size of the compiled-in DH parameters has been increased from |
| 437 | + 1024 to 2048 bits, making DH key exchange more resistant to |
| 438 | + brute-force attacks. However, some old SSL implementations, notably |
| 439 | + some revisions of Java Runtime Environment version 6, will not accept |
| 440 | + DH parameters longer than 1024 bits, and hence will not be able to |
| 441 | + connect over SSL. If it's necessary to support such old clients, you |
| 442 | + can use custom 1024-bit DH parameters instead of the compiled-in |
| 443 | + defaults. See <xref linkend="guc-ssl-dh-params-file">. |
| 444 | + </para> |
| 445 | + </listitem> |
| 446 | + |
| 447 | + <listitem> |
| 448 | +<!-- |
| 449 | +2017-08-04 [c30f1770a] Apply ALTER ... SET NOT NULL recursively in ALTER ... AD |
| 450 | +--> |
| 451 | + <para> |
| 452 | + When <command>ALTER TABLE ... ADD PRIMARY KEY</> marks |
| 453 | + columns <literal>NOT NULL</>, that change now propagates to |
| 454 | + inheritance child tables as well (Michael Paquier) |
443 | 455 | </para> |
444 | 456 | </listitem> |
445 | 457 |
|
|
454 | 466 | <para> |
455 | 467 | This module provided compatibility with the version of full text |
456 | 468 | search that shipped in pre-8.3 <productname>PostgreSQL</> releases. |
457 | | - </para> |
| 469 | + </para> |
458 | 470 | </listitem> |
459 | 471 |
|
460 | 472 | <listitem> |
|
887 | 899 | <listitem> |
888 | 900 | <!-- |
889 | 901 | 2017-03-25 [b8d7f053c] Faster expression evaluation and targetlist projection. |
| 902 | +2017-07-30 [cc9f08b6b] Move ExecProcNode from dispatch to function pointer base |
890 | 903 | --> |
891 | 904 | <para> |
892 | | - Reduce expression evaluation overhead during query execution (Andres |
893 | | - Freund) |
| 905 | + Reduce expression evaluation overhead during query execution, |
| 906 | + as well as plan node calling overhead (Andres Freund) |
894 | 907 | </para> |
895 | 908 |
|
896 | 909 | <para> |
|
2109 | 2122 | <!-- |
2110 | 2123 | 2016-11-03 [274bb2b38] libpq: Allow connection strings and URIs to specify mult |
2111 | 2124 | 2017-05-19 [5f374fe7a] libpq: Try next host if one of them times out. |
| 2125 | +2017-07-10 [7b02ba62e] Allow multiple hostaddrs to go with multiple hostnames. |
2112 | 2126 | --> |
2113 | 2127 | <para> |
2114 | | - Allow specification of <link |
2115 | | - linkend="libpq-connect-host">multiple host names</> in libpq |
2116 | | - connection strings and URIs |
2117 | | - (Robert Haas) |
| 2128 | + Allow specification of <link linkend="libpq-connect-host">multiple |
| 2129 | + host names or addresses</> in libpq connection strings and URIs |
| 2130 | + (Robert Haas, Heikki Linnakangas) |
2118 | 2131 | </para> |
2119 | 2132 |
|
2120 | 2133 | <para> |
|
0 commit comments