Fixes ISSUE-44832: Update postgresql driver to support scram password encrypt
authorCristian Berner <cristian.berner@openbravo.com>
Wed, 19 Aug 2020 14:42:22 +0200
changeset 37514 36f6383d31fc
parent 37513 9241a7fb9d0f
child 37515 45d74fc33c46
Fixes ISSUE 44832: Update postgresql driver to support scram password encrypt

Postgresql version >= 42.2.x is needed to support scram-sha-256 postgres
password encryption. This exists since postgres 11 and it requires
updating the client driver. Note, jre7 42.2.2 version didn't have this
feature included.

This updated driver also fixes several security issues and vulnerabilities.

Updated postgresql driver 42.2.2.jre7 -> 42.2.16
build.xml
legal/Licensing.txt
lib/runtime/postgresql-42.2.16.jar
lib/runtime/postgresql-42.2.2.jre7.jar
--- a/build.xml	Wed Aug 19 12:26:43 2020 +0200
+++ b/build.xml	Wed Aug 19 14:42:22 2020 +0200
@@ -886,7 +886,7 @@
         <pathelement path="${base.lib}/runtime/log4j-core-2.11.1.jar" />
         <pathelement path="${base.lib}/runtime/commons-pool-1.5.6.jar" />
         <pathelement path="${base.lib}/runtime/commons-dbcp-1.4.jar" />
-        <pathelement path="${base.lib}/runtime/postgresql-42.2.2.jre7.jar" />
+        <pathelement path="${base.lib}/runtime/postgresql-42.2.16.jar" />
         <pathelement path="${base.lib}/runtime/ojdbc8-19.3.0.0.jar" />
         <pathelement path="${base.lib}/runtime/ant-1.9.2.jar" />
         <pathelement path="${base.lib}/runtime/ant-launcher-1.9.2.jar" />
--- a/legal/Licensing.txt	Wed Aug 19 12:26:43 2020 +0200
+++ b/legal/Licensing.txt	Wed Aug 19 14:42:22 2020 +0200
@@ -114,7 +114,7 @@
 All files under Apache Software License 2.0, available at
 http://www.apache.org/licenses/LICENSE-2.0
 
-# postgresql-42.2.2.jre7.jar
+# postgresql-42.2.16.jar
 Under the BSD license, also available at http://jdbc.postgresql.org/license.html  
 
 # Dojo Foundation javascripts in web/js/dojo/
Binary file lib/runtime/postgresql-42.2.16.jar has changed
Binary file lib/runtime/postgresql-42.2.2.jre7.jar has changed