Changelog
postgresql-common (43.1ubuntu1) dapper; urgency=low
* Create an Ubuntu branch for this package; public bzr archive is at
http://people.ubuntu.com/~pitti/bzr/postgresql-common.
* Add support for system wide snakeoil SSL certificate:
- debian/control:
+ Depend on ssl-cert which provides snakeoil cert and the ssl-cert
group.
+ Remove Recommends: openssl.
- debian/postgresql-common.postinst:
+ Remove generation of PostgreSQL specific SSL certificate.
+ Add postgres user to the ssl-cert group on upgrades to this version or
on fresh installs.
- pg_createcluster:
+ Adapt cert/key paths to snakeoil
+ Update manpage documentation POD.
+ Enable SSL only if SSL key can be accessed with the cluster owner's
privileges.
- t/020_c: Add check that SSL is automatically enabled on >= 8.0 clusters.
* PgCommon.pm, change_ugid(): Fix the order of $< and $> assignment so that
we don't trash the saved uid and can switch back later. This allows us to
make use of this function in the test suite, too.
* t/TestLib.pm: Use change_ugid() in exec_as() get auxiliary groups. This
makes the test suite work with SSL keys which are only readable by
ssl-cert group members.
* pg_ctlcluster: Untaint PID value read from autovacuum.pid.
-- Martin Pitt <email address hidden> Wed, 22 Feb 2006 17:51:35 +0100
