Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gdeOc-0004Rk-6H for pgsql-hackers@arkaria.postgresql.org; Sun, 30 Dec 2018 16:57:02 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gdeOa-0006ZX-Vp for pgsql-hackers@arkaria.postgresql.org; Sun, 30 Dec 2018 16:57:00 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gdeOa-0006ZQ-Ol for pgsql-hackers@lists.postgresql.org; Sun, 30 Dec 2018 16:57:00 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gdeOY-0001xy-Mc for pgsql-hackers@lists.postgresql.org; Sun, 30 Dec 2018 16:57:00 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id wBUGumJP020533; Sun, 30 Dec 2018 11:56:48 -0500 From: Tom Lane To: Michael Paquier cc: Postgres hackers , Heikki Linnakangas Subject: Re: Removing --disable-strong-random from the code In-reply-to: <20186.1546188423@sss.pgh.pa.us> References: <20181230063219.GG608@paquier.xyz> <23371.1546152342@sss.pgh.pa.us> <20181230071549.GA2734@paquier.xyz> <20181230143740.GB2734@paquier.xyz> <20186.1546188423@sss.pgh.pa.us> Comments: In-reply-to Tom Lane message dated "Sun, 30 Dec 2018 11:47:03 -0500" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <20531.1546189008.1@sss.pgh.pa.us> Date: Sun, 30 Dec 2018 11:56:48 -0500 Message-ID: <20532.1546189008@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk I wrote: > LGTM otherwise. Oh, one more thought: the removal of the --disable-strong-random documentation stanza means there's no explanation of what to do to build on platforms without /dev/urandom. Perhaps something like this in installation.sgml: - You need OpenSSL, if you want to support - encrypted client connections. The minimum required version is - 0.9.8. + You need OpenSSL if you want to support + encrypted client connections. OpenSSL + is also required for random number generation on platforms that + do not have /dev/urandom (except Windows). + The minimum required version is 0.9.8. regards, tom lane