From 7b283d0e1d1d79bf1c962d790c94d2a53f3bb38a Mon Sep 17 00:00:00 2001 From: Michael Paquier Date: Mon, 6 Jan 2020 12:51:44 +0900 Subject: Remove support for OpenSSL 0.9.8 and 1.0.0 Support is out of scope from all the major vendors for these versions (for example RHEL5 uses a version based on 0.9.8, and RHEL6 uses 1.0.1), and it created some extra maintenance work. Upstream has stopped support of 0.9.8 in December 2015 and of 1.0.0 in February 2016. Since b1abfec, note that the default SSL protocol version set with ssl_min_protocol_version is TLSv1.2, whose support was added in OpenSSL 1.0.1, so there is no point to enforce ssl_min_protocol_version to TLSv1 in the SSL tests. Author: Michael Paquier Reviewed-by: Daniel Gustafsson, Tom Lane Discussion: https://postgr.es/m/20191205083252.GE5064@paquier.xyz --- doc/src/sgml/installation.sgml | 2 +- doc/src/sgml/libpq.sgml | 4 ---- 2 files changed, 1 insertion(+), 5 deletions(-) (limited to 'doc/src') diff --git a/doc/src/sgml/installation.sgml b/doc/src/sgml/installation.sgml index 9c10a897f19..d4904bf5a06 100644 --- a/doc/src/sgml/installation.sgml +++ b/doc/src/sgml/installation.sgml @@ -254,7 +254,7 @@ su - postgres encrypted client connections. OpenSSL is also required for random number generation on platforms that do not have /dev/urandom (except Windows). The minimum - version required is 0.9.8. + version required is 1.0.1. diff --git a/doc/src/sgml/libpq.sgml b/doc/src/sgml/libpq.sgml index 66b09da06f1..64cff49c4d7 100644 --- a/doc/src/sgml/libpq.sgml +++ b/doc/src/sgml/libpq.sgml @@ -1608,10 +1608,6 @@ postgresql://%2Fvar%2Flib%2Fpostgresql/dbname compression by default, and many operating system distributions disable it in prior versions as well, so setting this parameter to on will not have any effect if the server does not accept compression. - On the other hand, OpenSSL before 1.0.0 - does not support disabling compression, so this parameter is ignored - with those versions, and whether compression is used depends on the - server. -- cgit v1.2.3