pgpool-II 4.6.0 Documentation
Prev | Up | Appendix A. Release Notes | Next

# A.147. Release 3.6.16

> Release Date: 2019-03-29

## A.147.1. Enhancements

- Add new configuration option ssl_prefer_server_ciphers. (Muhammad Usama)

  Add the new setting ssl_prefer_server_ciphers to let users configure if they want client's or server's cipher order to take preference.

  The default for this parameter is off, which prioritize the client's cipher order as usual. However this is just for keeping backward compatibility, and it is possible that a malicious client uses weak ciphers. For this reason we recommend to set this parameter to on at all times.

- Allow to set a client cipher list. (Tatsuo Ishii, Yugo Nagata)

  For this purpose new parameter ssl_ciphers, which specifies the cipher list to be accepted by Pgpool-II, is added. This is already implemented in PostgreSQL and useful to enhance security when SSL is enabled.

## A.147.2. Bug fixes

- Fix unnecessary `fsync()` to `pgpool_status` file. (Tatsuo Ishii)

  Whenever new connections are created to PostgreSQL backend, `fsync()` was issued to `pgpool_status` file, which could generate excessive I/O in certain conditions. So reduce the chance of issuing `fsync()` so that it is issued only when backend status is changed.

  Discussion: [pgpool-general: 6436]

Prev | Home | Next
Release 3.6.17 | Up | Release 3.6.15