Your message dated Wed, 21 May 2014 16:04:49 +0000
with message-id <[email protected]>
and subject line Bug#743918: fixed in postgresql-common 155
has caused the Debian Bug report #743918,
regarding Adding a debconf question to control default ssl behaviour?
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
743918: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743918
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: postgresql-common
Severity: wishlist
Following repeated discussions on #postgresql-apt, we should move this
to the BTS:
Do we want ssl to be enabled by default in newly created clusters?
The problem with ssl enabled is that it eats CPU even when clients
connect from localhost (jdbc!). The problem with ssl disabled is of
course that this isn't a very adequate setup for 2014.
PostgreSQL upstream defaults to ssl off, but Debian's
postgresql-common has set ssl = on since 2005.
Users who want to change the default behaviour for new clusters they
create can set "ssl = off" in /etc/postgresql-common/createcluster.conf
(in jessie, not available yet in wheezy).
I'd be very reluctant to change the "default default" behaviour there,
though what could be done would be to add a Debconf question that asks
what people would like to have in their initial createcluster.conf
file.
So, what do people think? The spectrum of solutions would be:
1) leave ssl = on
2) add a low priority debconf question about the default, defaulting to "on"
3) add a high priority debconf question about the default, defaulting to "on"
4) add a high priority debconf question about the default, defaulting to "off"
5) add a low priority debconf question about the default, defaulting to "off"
6) set ssl = off
In any case, we should include ssl = <whatever> in the default
createcluster.conf file along with a comment so people can configure
it easily, plus a note in README.Debian (people do read that, don't
they?).
Personally I'd tend to 2) (but then few people would actually be
seeing the question, so maybe 3) is better, depending on how big the
note in README.Debian is).
(Generally, I'd like libpq to just use a different sslmode when
connecting to localhost, but that'd be a pretty invasive change from
upstream.)
Christoph
--
[email protected] | http://www.df7cb.de/
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: postgresql-common
Source-Version: 155
We believe that the bug you reported is fixed in the latest version of
postgresql-common, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Christoph Berg <[email protected]> (supplier of updated
postgresql-common package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 21 May 2014 17:34:09 +0200
Source: postgresql-common
Binary: postgresql-common postgresql-client-common postgresql-server-dev-all
postgresql postgresql-client postgresql-doc postgresql-contrib
Architecture: source all
Version: 155
Distribution: unstable
Urgency: medium
Maintainer: Debian PostgreSQL Maintainers
<[email protected]>
Changed-By: Christoph Berg <[email protected]>
Description:
postgresql - object-relational SQL database (supported version)
postgresql-client - front-end programs for PostgreSQL (supported version)
postgresql-client-common - manager for multiple PostgreSQL client versions
postgresql-common - PostgreSQL database-cluster manager
postgresql-contrib - additional facilities for PostgreSQL (supported version)
postgresql-doc - documentation for the PostgreSQL database management system
postgresql-server-dev-all - extension build tool for multiple PostgreSQL
versions
Closes: 743755 743918
Changes:
postgresql-common (155) unstable; urgency=medium
.
[ Christoph Berg ]
* postgresql-common: Maintain createcluster.conf using ucf, and add a
debconf question about the default use of ssl (default true, priority
medium). (Closes: #743918)
* Use "mount --make-rprivate /" inside our "unshare -m" calls.
(See #739593.)
* pg_ctlcluster: Add status action, add --foreground option, accept dash
(and slash) between version and cluster.
* Add systemd unit files as examples (testers welcome!).
* postgresql-client: Wrap pg_recvlogical, introduced in 9.4.
* t/050_encodings.t: 9.4 emits COPY command tags, suppress with psql -q.
* postgresql: Add Suggests: postgresql-doc. (Closes: #743755)
* pg_conftool: New script to read and edit PostgreSQL configuration files,
based on the existing read/edit functions in PgCommon.pm.
* pg_upgradecluster: Don't abort the upgrade if the config file symlinks are
already there.
* testsuite: Fix testsuite where -v does not include the latest version.
* testsuite -v -i will install packages needed for these versions.
.
[ Martin Pitt ]
* supported-versions: Welcome, Ubuntu 14.10!
Checksums-Sha1:
278347006c9077fb885e7151112b754dc1b4f2fc 2201 postgresql-common_155.dsc
a848a692f71233c8b878a57c351c68fe87cb411e 140436 postgresql-common_155.tar.xz
63b30df288f7efa6f3e41691b68b9e2e02ca615c 56146
postgresql-server-dev-all_155_all.deb
a6294a189852a8b81b7183dcc5815ea14e6409f4 49496 postgresql_9.3+155_all.deb
151bd56a17b53ebef7a2c6b2ea7d48b2ace43e1b 49502
postgresql-client_9.3+155_all.deb
c6e3b0cfc4492eea19678abcfa4a3fec082f7e1d 49484 postgresql-doc_9.3+155_all.deb
1812ce1287d13d1786994537aa0ddcad1d389cc2 49504
postgresql-contrib_9.3+155_all.deb
f78c72d4812d28a9e5e5f2b66884f525ca74aeb9 159362 postgresql-common_155_all.deb
4636471de5d658c60bca43626ab74649e31ff3f2 70010
postgresql-client-common_155_all.deb
Checksums-Sha256:
1e4ef1cd459540607f5c7095cc233f8c7d3d24cc04e84aaa47a961755f56ed77 2201
postgresql-common_155.dsc
d408e28d82116c22d26fbcad57f8bc4b667d018e84f53f24f42a09d286d59d6f 140436
postgresql-common_155.tar.xz
94da4bda1ea9cbfb01b9c1b7be2bece107c6127659c130c8ee123484ce35295d 56146
postgresql-server-dev-all_155_all.deb
ba370b878059fd1294c24917e931c79fbf0cda1b7c71daf4de9d4b45e1ff2c24 49496
postgresql_9.3+155_all.deb
93a2731d7a5b8ddc04ca50f53c522f5f43255b660a0d6c3c073cf0ba606a492f 49502
postgresql-client_9.3+155_all.deb
ad054724c3a8a430f2aefeb794acad9db8cb260c9f497b0f9a2a05aa2ef35b5c 49484
postgresql-doc_9.3+155_all.deb
c181925378119db7be260708259aa3d9ccee6fc0458d770c5683dd4d8a120c22 49504
postgresql-contrib_9.3+155_all.deb
1c409b9baf803a012ef2d925beaa9b2dc2f3fa9790c8df8ac9a8926986d50739 159362
postgresql-common_155_all.deb
9fe634c4a37bad6944ae7cb088ed601b3ac9564661be345e9ec068462be1844d 70010
postgresql-client-common_155_all.deb
Files:
c8c39e6cde01a24db3420c6b2334bec8 56146 database optional
postgresql-server-dev-all_155_all.deb
dd5a0ff785a9f710dcf9a5ba6c6f238c 49496 database optional
postgresql_9.3+155_all.deb
597ad136a0cd5071142f3c75f7fecf5a 49502 database optional
postgresql-client_9.3+155_all.deb
8b9e8a86cd1ce7443c11c19640ddfa76 49484 doc optional
postgresql-doc_9.3+155_all.deb
953d478fbaa8753ba1beb25537528c32 49504 database optional
postgresql-contrib_9.3+155_all.deb
7d33c7ab331d11517d8ebf2f1edad8a3 159362 database optional
postgresql-common_155_all.deb
c604af215aacc8f5db266322b02183a5 70010 database optional
postgresql-client-common_155_all.deb
c87c2ca71d7908037c5672ab15341b68 2201 database optional
postgresql-common_155.dsc
ecb028ae04588bb89b07236a7a807d4a 140436 database optional
postgresql-common_155.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=OQhw
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-postgresql-public mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-postgresql-public
