|
8 | 8 | <bodybgcolor="#FFFFFF"text="#000000"link="#FF0000"vlink="#A00000"alink="#0000FF"> |
9 | 9 | <h1><aname="section_1">PostgreSQL TODO List</a></h1> |
10 | 10 | <p>Current maintainer: Bruce Momjian (<ahref="mailto:bruce@momjian.us">bruce@momjian.us</a>)<br/> |
11 | | -Last updated:Thu Jul 31 16:47:21 EDT 2008 |
| 11 | +Last updated:Mon Aug 11 23:48:39 EDT 2008 |
12 | 12 | </p> |
13 | 13 | <p>The most recent version of this document can be viewed at<br/> |
14 | 14 | <ahref="http://www.postgresql.org/docs/faqs.TODO.html">http://www.postgresql.org/docs/faqs.TODO.html</a>. |
@@ -79,11 +79,14 @@ <h1><a name="section_2">Administration</a></h1> |
79 | 79 | sharing SSL keys with other applications |
80 | 80 | <p><ahref="http://archives.postgresql.org/pgsql-bugs/2007-12/msg00069.php">http://archives.postgresql.org/pgsql-bugs/2007-12/msg00069.php</a> |
81 | 81 | </p> |
82 | | -</li><li>Allow client certificate names to be checked against the client |
| 82 | +</li><li>AllowSSLclient certificate names to be checked against the client |
83 | 83 | hostname |
84 | 84 | <p> This is already implemented in |
85 | 85 | libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code |
86 | 86 | is commented out. |
| 87 | +</p> |
| 88 | +</li><li>Add 'hostgss' pg_hba.conf option to allow GSS link-level encryption |
| 89 | +<p><ahref="http://archives.postgresql.org/pgsql-hackers/2008-07/msg01454.php">http://archives.postgresql.org/pgsql-hackers/2008-07/msg01454.php</a> |
87 | 90 | </p> |
88 | 91 | </li><li>Improve server security options |
89 | 92 | <p><ahref="http://archives.postgresql.org/pgsql-hackers/2008-04/msg01875.php">http://archives.postgresql.org/pgsql-hackers/2008-04/msg01875.php</a> |
|