Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
branch: REL9_0_STABLE

This branch is 1282 commits ahead, 8248 commits behind master

Back-patch libpq support for TLS versions beyond v1.

Since 7.3.2, libpq has been coded in such a way that the only SSL protocol
it would allow was TLS v1.  That approach is looking increasingly obsolete.
In commit 820f08c we fixed it to allow TLS >= v1, but did not
back-patch the change at the time, partly out of caution and partly because
the question was confused by a contemporary server-side change to reject
the now-obsolete SSL protocol v3.  9.4 has now been out long enough that
it seems safe to assume the change is OK; hence, back-patch into 9.0-9.3.

(I also chose to back-patch some relevant comments added by commit
326e1d7, but did *not* change the server behavior; hence, pre-9.4
servers will continue to allow SSL v3, even though no remotely modern
client will request it.)

Per gripe from Jan Bilek.
latest commit 4dddf85528
Tom Lane authored
..
Failed to load latest commit information.
backend Back-patch libpq support for TLS versions beyond v1.
bin Translation updates
include Revert error-throwing wrappers for the printf family of functions.
interfaces Back-patch libpq support for TLS versions beyond v1.
makefiles Don't use deprecated dllwrap on Cygwin.
pl Translation updates
port Revert error-throwing wrappers for the printf family of functions.
template Don't try to force use of -no-cpp-precomp on OS X. It's been five years
test Fix incorrect checking of deferred exclusion constraint after a HOT u…
timezone Update time zone data files to tzdata release 2015d.
tools Revert error-throwing wrappers for the printf family of functions.
tutorial Remove tabs after spaces in C comments
.gitignore Convert cvsignore to gitignore, and add .gitignore for build targets.
DEVELOPERS Replace a couple of references to files that no longer exist in the s…
Makefile Rethink the way walreceiver is linked into the backend. Instead than …
Makefile.global.in Add mode where contrib installcheck runs each module in a separately …
Makefile.shlib Unlink static libraries before rebuilding them.
bcc32.mak Remove old-style win32 client-only visual c++ build infrastructure fo…
nls-global.mk Avoid error from mkdir if no languages are to be installed
win32.mak Update supported standalone VC++ version to 7.1+ only, and fix
Something went wrong with that request. Please try again.