Andres Freund 426746b930 Remove ssl renegotiation support. ... While postgres' use of SSL renegotiation is a good idea in theory, it turned out to not work well in practice. The specification and openssl's implementation of it have lead to several security issues. Postgres' use of renegotiation also had its share of bugs. Additionally OpenSSL has a bunch of bugs around renegotiation, reported and open for years, that regularly lead to connections breaking with obscure error messages. We tried increasingly complex workarounds to get around these bugs, but we didn't find anything complete. Since these connection breakages often lead to hard to debug problems, e.g. spuriously failing base backups and significant latency spikes when synchronous replication is used, we have decided to change the default setting for ssl renegotiation to 0 (disabled) in the released backbranches and remove it entirely in 9.5 and master. Author: Andres Freund Discussion: 20150624144148.GQ4797@alap3.anarazel.de Backpatch: 9.5 and master, 9.0-9.4 get a different patch		2015-07-28 22:06:31 +02:00
..
access	Don't assume that 'char' is signed.	2015-07-27 21:51:25 +03:00
bootstrap	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
catalog	Redesign tablesample method API, and do extensive code review.	2015-07-25 14:39:00 -04:00
commands	Add new function pg_notification_queue_usage.	2015-07-17 09:12:03 -04:00
common	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
datatype	Define integer limits independently from the system definitions.	2015-04-02 17:43:35 +02:00
executor	Redesign tablesample method API, and do extensive code review.	2015-07-25 14:39:00 -04:00
foreign	Add support for doing late row locking in FDWs.	2015-05-12 14:10:17 -04:00
lib	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
libpq	Remove ssl renegotiation support.	2015-07-28 22:06:31 +02:00
mb	Teach UtfToLocal/LocalToUtf to support algorithmic encoding conversions.	2015-05-14 22:27:12 -04:00
nodes	Redesign tablesample method API, and do extensive code review.	2015-07-25 14:39:00 -04:00
optimizer	Redesign tablesample method API, and do extensive code review.	2015-07-25 14:39:00 -04:00
parser	Redesign tablesample method API, and do extensive code review.	2015-07-25 14:39:00 -04:00
port	Given a gcc-compatible xlc compiler, prefer xlc-style atomics.	2015-07-08 20:44:21 -04:00
portability	Use mmap MAP_NOSYNC option to limit shared memory writes	2015-03-21 22:06:19 -04:00
postmaster	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
regex	Add a bit more commentary about regex's colormap tree data structure.	2015-05-24 12:40:38 -04:00
replication	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
rewrite	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
snowball	Update copyright for 2015	2015-01-06 11:43:47 -05:00
storage	Centralize decision-making about where to get a backend's PGPROC.	2015-07-28 14:51:57 -04:00
tcop	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
tsearch	Fix statically allocated struct with FLEXIBLE_ARRAY_MEMBER member.	2015-02-20 17:50:18 -05:00
utils	Redesign tablesample method API, and do extensive code review.	2015-07-25 14:39:00 -04:00
.gitignore	Autoconfiscate selection of 64-bit int type for 64-bit large object API.	2012-10-07 21:52:43 -04:00
c.h	Fix more typos in comments.	2015-05-20 19:45:43 +03:00
fmgr.h	Fix comment in fmgr.h to refer to actual function used.	2015-06-15 23:21:03 -04:00
funcapi.h	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
getaddrinfo.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00
getopt_long.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00
Makefile	Install all headers for the new atomics API.	2014-10-02 16:52:21 +02:00
miscadmin.h	Code + docs review for escaping of option values (commit 11a020eb6).	2015-06-29 12:42:52 -04:00
pg_config_ext.h.in	Autoconfiscate selection of 64-bit int type for 64-bit large object API.	2012-10-07 21:52:43 -04:00
pg_config_ext.h.win32	Autoconfiscate selection of 64-bit int type for 64-bit large object API.	2012-10-07 21:52:43 -04:00
pg_config_manual.h	Define integer limits independently from the system definitions.	2015-04-02 17:43:35 +02:00
pg_config.h.in	Use Intel SSE 4.2 CRC instructions where available.	2015-04-14 17:05:03 +03:00
pg_config.h.win32	Stamp HEAD as 9.6devel.	2015-06-30 14:01:15 -04:00
pg_getopt.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00
pg_trace.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00
pgstat.h	pgindent run for 9.5	2015-05-23 21:35:49 -04:00
pgtar.h	Error when creating names too long for tar format	2015-02-24 13:41:07 -05:00
pgtime.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00
port.h	Redesign tablesample method API, and do extensive code review.	2015-07-25 14:39:00 -04:00
postgres_ext.h	pgindent run for 9.4	2014-05-06 12:12:18 -04:00
postgres_fe.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00
postgres.h	Support "expanded" objects, particularly arrays, for better performance.	2015-05-14 12:08:49 -04:00
rusagestub.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00
windowapi.h	Update copyright for 2015	2015-01-06 11:43:47 -05:00