README
     Progress (R) DataDirect (R)
	 
     Progress(R) DataDirect(R) for ODBC for 
     Amazon Redshift(TM) Wire Protocol Driver

     UNIX and Linux Platforms (32- and 64-bit)
     Release 8.0.0
     October 29, 2019


***********************************************************************
Copyright (C) 2019 Progress Software Corporation and/or its 
subsidiaries or affiliates. All Rights Reserved. 
***********************************************************************

This README file contains information for Progress(R) DataDirect(R)
for ODBC for Amazon Redshift(TM) Wire Protocol Driver. 

This README file contains information not included in the PROGRESS
DATADIRECT(R) FOR ODBC FOR Amazon Redshift Wire Protocol driver documentation.

CONTENTS

Installation Directory
Changes Since 8.0.0 GA 
Changes for 8.0.0 GA
Configuring Data Sources
Driver WorkAround Options
Notes, Known Problems, and Restrictions
Documentation
Installed Files for the 32-bit Driver
Installed Files for the 64-bit Driver


    Installation Directory

* The default installation directory for the 32-bit driver is:

  /opt/Progress/DataDirect/ODBC_80_32bit

* The default installation directory for the 64-bit driver is:

  /opt/Progress/DataDirect/ODBC_80_64bit
  
If you do not have /opt directory permissions, the installer program installs
the driver to your home directory by default. For example, the directory for
the 32-bit installation would be:

  /<home_directory>/Progress/DataDirect/ODBC_80_32bit

where

  <home_directory>
  
  is the home directory for the user who is installing the product. 
  
  
   Changes Since 8.0.0 GA 

SSL Enhancement (1.1.1d) 
------------------------
The default version of the OpenSSL library, 1.0.2r, has reached the end of its
product life-cycle and has been upgraded to version 1.1.1d. In additon to
recieving full update support, version 1.1.1d fixes the following security
vulnerabilities:
 * Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey (CVE-2019-1563)
 * Windows builds with insecure path defaults (CVE-2019-1552)
 * Fork Protection (CVE-2019-1549)
 * ECDSA remote timing attack (CVE-2019-1547)
 * ChaCha20-Poly1305 with long nonces (CVE-2019-1543) 
 * Timing vulnerability in ECDSA signature generation (CVE-2018-0735) 
 
This upgrade is available in the 1.1.1 version of the OpenSSL library files, 
libivtls28.so [.a|.sl] (32-bit) and libddtls28.so [.a] (64-bit).   
 
Version 1.1.1d also addresses vulnerabilities resolved by earlier versions of 
the library.  

For more information on OpenSSL vulnerabilities resolved by this upgrade, refer
to the corresponding OpenSSL announcements at: 
https://www.openssl.org/news/vulnerabilities-1.1.1.html 
	
Note: By default, the driver will attempt to load version 1.1.1 of the library;
      however, if the library cannot be loaded, the driver will fall back to 
      version 1.0.2. 

See "Designating an OpenSSL Library" in the "Notes, Known Issues, and 
Restrictions" section for build numbers and a comparison of libraries that are
installed with the driver.	

AllowedOpenSSLVersions
----------------------
Determines which version of the OpenSSL library file the driver uses for data
encryption when multiple versions are installed with the product. For example, 
when specifying a value of 1.1.1 (AllowedOpenSSLVersions=1.1.1), the driver 
uses the 1.1.1 version of the library stored in the /lib subdirectory. Refer to
the user's guide for more information.

See "Designating an OpenSSL Library" in the "Notes, Known Issues, and 
Restrictions" section for build numbers and a comparison of these libraries.

Support for External Tables
----------------------------
The driver has been enhanced to support metadata calls on external tables.
Now, all SQL operations are supported on external tables.

SSL Enhancement (1.0.2r) 
------------------------
Note: A newer version of the OpenSSL library, 1.1.1d, is now installed with the
product. In addition to fixing multiple new vulnerabilities, version 1.1.1d 
also addresses the vulnerabilities resolved by version 1.0.2r. 

The default OpenSSL library version has been updated to 1.0.2r, which fixes the 
following security vulnerabilities:
 * 0-byte record padding oracle (CVE-2019-1559)
 * Microarchitecture timing vulnerability in ECC scalar 
   multiplication (CVE-2018-5407)
 * Timing vulnerability in DSA signature generation (CVE-2018-0734)
 * Client DoS due to large DH parameter (CVE-2018-0732)
 * Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)
 * Constructed ASN.1 types with a recursive definition could exceed the 
   stack (CVE-2018-0739)   
   
This upgrade is available starting in build 08.02.0194 of the OpenSSL library 
file.     
   
SSL Enhancement (1.0.2n)
------------------------
Note: OpenSSL library 1.0.2n has been replaced with version 1.0.2r. In addition
to fixing multiple new vulnerabilities, version 1.0.2r also addresses the 
vulnerabilities resolved by version 1.0.2n. 

Version 1.0.2n of the OpenSSL library fixes the following security 
vulnerabilities:
 * rsaz_1024_mul_avx2 overflow bug on x86_64(CVE-2017-3738)
 * Read/write after SSL object in error state (CVE-2017-3737)
 * bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
 * Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)
   
Certifications
--------------
* Certified with Red Hat Enterprise 7.3 (driver version 
  08.00.0053 (B0259, U0174))   


    Changes for 8.0.0 GA

Certifications
--------------
* Certified with Debian Linux 7.11, 8.5 (driver version 07.16.0106 
  (B0302, U0201))
* Certified with Ubuntu Linux 14.04, 16.04 (driver version 07.16.0106 
  (B0302, U0201))	

HTTP Proxy Support
------------------	
The driver has been enhanced to support connecting to a proxy server through
an HTTP connection. HTTP proxy support is configurable with the new ProxyHost,
ProxyMode, ProxyPassword, ProxyPort, and ProxyUser connection options.

TimestampTZ Data Type
---------------------
The driver has been enhanced to support the TimestampTZ data type.

FetchTSWTZasTimestamp Connection Option
--------------------------------------- 
The new FetchTSWTZasTimestamp option allows you to determine whether the 
driver returns column values with the TimestampTZ data type as the
ODBC data type SQL_TYPE_TIMESTAMP or SQL_VARCHAR.  

ODBC Functions
--------------
The driver has been enhanced to support the HOUR, MINUTE, MONTH, QUARTER, 
SECOND, WEEK, and YEAR ODBC functions for improved support of third-party 
applications such as Tableau. 

SSL Enhancement (1.0.2k)
------------------------
Note: OpenSSL library 1.0.2k has been replaced with version 1.0.2r. In addition
to fixing multiple new vulnerabilities, version 1.0.2r also addresses the 
vulnerabilities resolved by version 1.0.2k. 

The default OpenSSL library version has been updated to 1.0.2k, which fixes the 
following security vulnerabilities:
 * Truncated packet could crash via OOB read (CVE-2017-3731)
 * BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
 * Montgomery multiplication may produce incorrect results (CVE-2016-7055) 

UTF-8 Support in the odbc.ini and odbcinst.ini Files
----------------------------------------------------
The driver and Driver Manager have been enhanced to support UTF-8 encoding in 
the odbc.ini and odbcinst.ini files. 

Default Value for CryptoProtocolVersion 
---------------------------------------
The default value for CryptoProtocolVersion has been updated to 
TLSv1.2,TLSv1.1,TLSv1. This change improves the security of the driver by 
employing only the most secure cryptographic protocols as the default behavior.	

 
For more information about these features, refer to the PROGRESS DATADIRECT 
FOR ODBC FOR AMAZON REDSHIFT USER'S GUIDE AND REFERENCE.
 
 
      Configuring Data Sources

Data sources are stored in the system information file (typically, 
odbc.ini). For details on configuring this file, see the PROGRESS DATADIRECT
FOR ODBC FOR AMAZON WIRE PROTOCOL DRIVER USER'S GUIDE AND REFERENCE.
 
 
      Driver WorkAround Options

Progress DataDirect has included non-standard connection options 
(workarounds) for the drivers that enable you to take full advantage of 
packaged ODBC-enabled applications requiring non-standard or extended 
behavior.

Refer to the chapter "WorkAround Options" in the PROGRESS DATADIRECT FOR ODBC
FOR AMAZON REDSHIFT WIRE PROTOCOL DRIVER USER'S GUIDE AND REFERENCE 
for a description of these options.
 
 
	Notes, Known Problems, and Restrictions 

Designating an OpenSSL Library
------------------------------
Although version 1.1.1d of the OpenSSL library is the most secure version of
the library, some characteristics of the library can cause connections to 
certain databases to fail. To allow you to continue using earlier versions 
until your environment is ready to migrate to version 1.1.1d, the product 
also installs earlier versions of the library.  

The following versions of the OpenSSL library have been installed with this
product, listed in order of most secure to least secure: 
* (Default) 1.1.1d (supported with file lib<xx>tls28.so [.a|.sl])
* 1.0.2r (version 08.02.0194 of file lib<xx>ssl28.so [.a|.sl])

When determining which version of the OpenSSL library to use, consider the 
following factors: 

For version 1.1.1d:
Upgrading to 1.1.1d provides you with a fully supported version of the OpenSSL 
library that receives feature and security updates. Versions 1.0.2 and earlier 
have reached the end of their product lifecycle and will no longer receive 
updates after 12/31/2019.  

Upgrading to 1.1.1d fixes the following vulnerabilities in additon to 
vulnerabilities resolved by earlier versions of the library:
 * Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey (CVE-2019-1563)
 * Windows builds with insecure path defaults (CVE-2019-1552)
 * Fork Protection (CVE-2019-1549)
 * ECDSA remote timing attack (CVE-2019-1547)
 * ChaCha20-Poly1305 with long nonces (CVE-2019-1543) 
 * Timing vulnerability in ECDSA signature generation (CVE-2018-0735) 

Upgrading to version 1.1.1d includes the following risks: 
* The SSL v2 protocol is not supported. If your environment requires SSL v2, 
  the driver will be unable to connect using this library.  
* The following encryption ciphers were reported by version 1.0.2 of the 
  libaray, but not by version 1.1.1. These ciphers should be considered 
  unsupported for version 1.1.1:

  DES-CBC3-MD5	                ECDH-ECDSA-AES256-SHA
  DES-CBC3-SHA                  ECDH-ECDSA-AES256-SHA384
  DH-DSS-AES128-GCM-SHA256      ECDH-ECDSA-DES-CBC3-SHA
  DH-DSS-AES128-SHA             ECDH-ECDSA-RC4-SHA
  DH-DSS-AES128-SHA256          ECDHE-ECDSA-DES-CBC3-SHA
  DH-DSS-AES256-GCM-SHA384      ECDHE-ECDSA-RC4-SHA
  DH-DSS-AES256-SHA             ECDHE-RSA-DES-CBC3-SHA
  DH-DSS-AES256-SHA256          ECDHE-RSA-RC4-SHA
  DH-DSS-DES-CBC3-SHA           ECDH-RSA-AES128-GCM-SHA256
  DH-DSS-SEED-SHA               ECDH-RSA-AES128-SHA
  DHE-DSS-AES128-GCM-SHA256     ECDH-RSA-AES128-SHA256
  DHE-DSS-AES128-SHA            ECDH-RSA-AES256-GCM-SHA384
  DHE-DSS-AES128-SHA256         ECDH-RSA-AES256-SHA
  DHE-DSS-AES256-GCM-SHA384     ECDH-RSA-AES256-SHA384
  DHE-DSS-AES256-SHA            ECDH-RSA-DES-CBC3-SHA
  DHE-DSS-AES256-SHA256         ECDH-RSA-RC4-SHA
  DHE-DSS-SEED-SHA              EDH-DSS-DES-CBC3-SHA
  DHE-RSA-SEED-SHA              EDH-RSA-DES-CBC3-SHA
  DH-RSA-AES128-GCM-SHA256      PSK-3DES-EDE-CBC-SHA
  DH-RSA-AES128-SHA             PSK-RC4-SHA
  DH-RSA-AES128-SHA256          RC2-CBC-MD5
  DH-RSA-AES256-GCM-SHA384      RC4-MD5
  DH-RSA-AES256-SHA             RC4-SHA
  DH-RSA-AES256-SHA256          SEED-SHA
  DH-RSA-DES-CBC3-SHA           SRP-3DES-EDE-CBC-SHA
  DH-RSA-SEED-SHA               SRP-DSS-3DES-EDE-CBC-SHA
  ECDH-ECDSA-AES128-GCM-SHA256  SRP-DSS-AES-128-CBC-SHA
  ECDH-ECDSA-AES128-SHA         SRP-DSS-AES-256-CBC-SHA
  ECDH-ECDSA-AES128-SHA256      SRP-RSA-3DES-EDE-CBC-SHA
  ECDH-ECDSA-AES256-GCM-SHA384	

Refer to "Designating an OpenSSL library" in the User's Guide and Reference for 
instructions on using an earlier version of the OpenSSL library.  

For more information on the OpenSSL vulnerabilities mentioned in this section, 
refer to the corresponding OpenSSL announcements at https://www.openssl.org/.

For SSL Users
-------------
When trying to connect to a database using SSL encryption, you may 
receive an error message similar to: "PRNG not seeded". This is because 
certain versions of some operating systems do not generate truly random 
numbers necessary for encryption. For more information about this error 
and available patches, please refer to the Web site:

http://www.openssl.org/support/faq.html#USER1
  
LANG Environment Setting on UNIX and Linux Platforms
----------------------------------------------------
A default installation of the product on UNIX and Linux assumes that 
the value of the LANG environment setting is en_US. If your locale is 
not set to en_US, the drivers may not return error messages properly. 
In this case, you must create a symbolic link in the 
<Install_Dir>/locale directory that has the same value as the LANG 
environment setting. This link must point to the 
<Install_Dir>/locale/en_US directory.
 
SQLColAttribute(s)
------------------
The column attributes 1001 and 1002, which were assigned as DataDirect- 
specific attributes, were inadvertently used as system attributes by
the Microsoft 3.0 ODBC implementation. Applications using those 
attributes must now use 1901 and 1902, respectively.
 
SQLDriverConnect
----------------
SQLDriverConnect using options other than SQL_DRIVER_NOPROMPT is
supported only on systems that include the Motif libraries 
libivmback.so or libddmback.so and vscnctdlg.so.
 
SQL_C_NUMERIC
-------------
Because of inconsistencies in the ODBC specification, users attempting
to use SQL_C_NUMERIC parameters must set the precision and scale values 
of the corresponding structure and the descriptor fields in the 
Application Parameter Descriptor.

For AIX Users
------------------------------
Some IBM AIX C compilers, such as xlc 3.1.4, do not support the use 
of C++ build binaries. C developers on AIX should consult their 
compiler documentation and verify that their AIX C compiler supports
the use of C++ shared libraries or the application could be unstable.
 
 
     Documentation	 	 

THE PROGRESS DATADIRECT FOR ODBC FOR AMAZON REDSHIFT WIRE PROTOCOL DRIVER
USER'S GUIDE AND REFERENCE 
-----------------------------------------------------------------------
This guide is provided in PDF and HTML versions. Both versions are installed 
in the RedshiftHelp subdirectory of your product installation directory. 
You can access the HTML help by opening the index.html file. The PDF version, 
which you can view using Adobe Reader, can be viewed by opening the 
odbcredshiftuser.pdf file  

NOTE: To download Adobe Reader, visit the Adobe Web site at 
http://www.adobe.com.


     Installed Files for the 32-bit Driver
	 
This file list assumes a full installation of the 32-bit driver and 
documentation. 

The installer copies the following files and subdirectories to the 
product installation directory, by default:

/opt/Progress/DataDirect/ODBC_80_32bit:

odbc.csh              Setup script for C shell
odbc.ini              Sample odbc.ini file
odbcinst.ini          Sample odbcinst.ini file
odbc.sh               Setup script for Bourne shell
IVODBC.LIC            DataDirect license file
fixes.txt             List of fixes since last release
license.txt           End User License Agreement


/bin:
ivtestlib            Test application to check that required libraries
                     are present and loadable


/help:
redshift_connect.txt Help text for the Amazon Redshift WP driver 
                     SQLDriverConnect dialog 

/help/RedshiftHelp:
index.html           HTML help system entry file [Linux only]
/*.*                 Support folders for the HTML help system 
redshiftodbcuser.pdf PDF copy of the User's Guide and Reference


/include:
odbcinst.h            Include files
qesqlext.h
sql.h
sqlext.h
sqltypes.h
sqlucode.h
sqlunx.h


/install:
*.* Files associated with the installer program

/jre:
*.* Files associated with the Amazon Redshift WP driver


/lib:
The following library files all have the extension .so, except when
installed on HP-UX PA-RISC, in which case the extension is .sl.

Resource library file names end in r; setup library file names end in s. 
The resource and setup libraries are for use by the LINUX ODBC 
Administrator and appear in the file list ONLY on Linux platforms.

ivrsft28.so           Amazon Redshift WP driver  
ivrsft28r.so	      Amazon Redshift WP driver resource file
ivtrc28.so            Progress DataDirect trace library
libivcurl28.so        Library used for HTTP connections [.a on AIX]
libivicu28.so         Unicode conversion tables [.a on AIX]
libivmbackW.so        SQLDriverConnect Motif library 
libivssl28.so	      TLS/SSL support file (OpenSSL library 
                      version 1.0.2r) [.a on AIX]
libivtls28.so	      TLS/SSL support file (OpenSSL library 
                      version 1.1.1d) [.a on AIX]
libodbc.so            ODBC Driver Manager [.a on AIX]
libodbcinst.so        ODBC Installer [.a on AIX]
odbc.so               ODBC Driver Manager (dynamically loadable) 
                      [AIX only]
odbccurs.so           ODBC Cursor library 
odbcinst.so           ODBC Installer (dynamically loadable) 
                      [AIX only]
vscnctdlg.so          ODBC library for Motif operations 

/lib/OpenSSL:
/latest/libivssl28.so TLS/SSL support file (OpenSSL library 
                      version 1.1.1d) [.a on AIX] 
/1.0.2r/libivssl28.so TLS/SSL support file (OpenSSL library 
                      version 1.0.2r) [.a on AIX] 
							  
/locale/en_US/LC_MESSAGES:
ivmbackw.mo           Motif library message file
ivmbackw.po           Motif library message source
ivrsft28.mo           Amazon Redshift WP driver message file
ivrsft28.po           Amazon Redshift WP driver message file source
odbc.m                ODBC Driver Manager message file
odbc.po               ODBC Driver Manager message source


/NOTICES:
ODBC For Amazon Redshift
V8.0 NOTICES.TXT         Third-party vendor license agreements	


/READMES:
ODBC FOR Amazon Redshift
V8.0 README.TXT          This file

/samples:
/bulk/bulk                  	Bulk application
/bulk/bulk.c                	Bulk example source
/bulk/bulk.mak              	Bulk example make file
/bulk/bulk.txt              	Bulk example description
/bulk/ddlogging.properties  	Log configuration file for the
                                Amazon Redshift Wire Protocol driver

/bulkstrm/bulk.cpp          	Bulk streaming example source
/bulkstrm/bulk.hpp          	Bulk streaming example header
/bulkstrm/bulkstrm          	Bulk streaming example application
/bulkstrm/bulkstrm.txt      	Bulk streaming example description
/bulkstrm/main.cpp          	Bulk streaming example source
/bulkstrm/msgprintf.hpp     	Bulk streaming example header
/bulkstrm/streambulk.mak    	Bulk streaming example make file
/bulkstrm/ddlogging.properties	Log configuration file for the 
                                Redshift driver

/example/example            	Example application
/example/example.c          	Example source
/example/example.h          	Example header
/example/example.mak        	Example make file
/example/example.txt        	Example description
/example/ddlogging.properties/  Log configuration file for the 
                                Redshift driver


/tools:
ddextu                    License Extender utility
ddprocinfo                Processor Information utility

					 
          	  
  Installed Files for the 64-bit Driver
	 
This file list assumes a full installation of the 64-bit driver and 
documentation. 

The installer copies the following files and subdirectories to the
product installation directory, by default:

/opt/Progress/DataDirect/ODBC_80_64bit:


odbc.csh              Setup script for C shell
odbc.ini              Sample odbc.ini file
odbcinst.ini          Sample odbcinst.ini file
odbc.sh               Setup script for Bourne shell
DDODBC.LIC            DataDirect license file
fixes.txt             List of fixes since last release
license.txt           End User License Agreement


/bin:
ddtestlib            Test application to check that required libraries
                     are present and loadable


/help:
redshift_connect.txt Help text for the Amazon Redshift WP driver 
                     SQLDriverConnect dialog 

/help/RedshiftHelp:
index.html           HTML help system entry file [Linux only]
/*.*                 Support folders for the HTML help system 
redshiftodbcuser.pdf PDF copy of the User's Guide and Reference
					 
/include:
odbcinst.h            Include files
qesqlext.h
sql.h
sqlext.h
sqltypes.h
sqlucode.h
sqlunx.h


/install:
*.* Files associated with the installer program


/jre:
*.* Files associated with the Amazon Redshift WP driver


/lib:
Resource library file names end in r; setup library file names end in s. 
The resource and setup libraries are for use by the LINUX ODBC 
Administrator and appear in the file list ONLY on Linux platforms.

ddrsft28.so           Amazon Redshift WP driver  
ddrsft28r.so          Amazon Redshift WP driver resource file
ddtrc28.so            Progress DataDirect trace library
libddcurl28.so        Library used for HTTP connections  [.a on AIX]
libddicu28.so         Unicode conversion tables  [.a on AIX]
libddmbackw.so        SQLDriverConnect Motif library 
libddssl28.so         TLS/SSL support file(OpenSSL library 
                      version 1.0.2r) [.a on AIX]
libddtls28.so         TLS/SSL support file(OpenSSL library 
                      version 1.1.1d) [.a on AIX]
libodbc.so            ODBC Driver Manager [.a on AIX]
libodbcinst.so        ODBC Installer [.a on AIX]
odbc.so	              ODBC Driver Manager (dynamically loadable)[AIX only]
odbccurs.so           ODBC Cursor library 
odbcinst.so           ODBC Installer (dynamically loadable) 
                      [AIX only]
vscnctdlg.so          ODBC library for Motif operations

/lib/OpenSSL:
1.0.2r/libddssl28.so  TLS/SSL support file (OpenSSL library 
                      version 1.0.2r) [.a on AIX]

latest/libddssl28.so  TLS/SSL support file (OpenSSL library 
                      version 1.1.1d) [.a on AIX]  

/locale/en_US/LC_MESSAGES:
ddmbackw.mo           Motif library message file
ddmbackw.po           Motif library message source
ddrsft28.mo           Amazon Redshift WP driver message file
ddrsft28.po           Amazon Redshift WP driver message file source
odbc.m                ODBC Driver Manager message file
odbc.po               ODBC Driver Manager message source


/NOTICES:
ODBC FOR Amazon Redshift
V8.0 NOTICES.TXT	     Third-party vendor license agreements


/READMES:
ODBC FOR Amazon Redshift
V8.0 README.TXT	         This file


/samples:
/bulk/bulk                      Bulk application
/bulk/bulk.c                    Bulk example source
/bulk/bulk.mak                  Bulk example make file
/bulk/bulk.txt                  Bulk example description
/bulk/ddlogging.properties      Log configuration file for the
                                Amazon Redshift WP driver

/bulkstrm/bulk.cpp              Bulk streaming example source
/bulkstrm/bulk.hpp              Bulk streaming example header
/bulkstrm/bulkstrm              Bulk streaming example application
/bulkstrm/bulkstrm.txt          Bulk streaming example description
/bulkstrm/main.cpp              Bulk streaming example source
/bulkstrm/msgprintf.hpp         Bulk streaming example header
/bulkstrm/streambulk.mak        Bulk streaming example make file
/bulkstrm/ddlogging.properties  Log configuration file for the 
                                Amazon Redshift WP driver

/example/ddlogging.properties   Log configuration file for
                                the Amazon Redshift WP driver
/example/example                Example application
/example/example.c              Example source
/example/example.h              Example header
/example/example.mak            Example make file
/example/example64.txt          Example description

/tools:
ddextu                          License Extender utility
ddprocinfo                      Processor Information utility
   
	
	
~~~~~~~~~~~~~~
October 29, 2019
End of README.TXT