Raise the minimum supported OpenSSL version to 1.1.1
Daniel Gustafsson <dgustafsson@postgresql.org>
Raise the minimum supported OpenSSL version to 1.1.1 Commit a70e01d4306fdbcd retired support for OpenSSL 1.0.2 in order to get rid of the need for manual initialization of the library. This left our API usage compatible with 1.1.0 which was defined as the minimum required version. Also mention that 3.4 is the minimum version required when using LibreSSL. An upcoming commit will introduce support for configuring TLSv1.3 cipher suites which require an API call in OpenSSL 1.1.1 and onwards. In order to support this setting this commit will set v1.1.1 as the new minimum required version. The version-specific call for randomness init added in commit c3333dbc0c0 is removed as it's no longer needed. Author: Daniel Gustafsson <daniel@yesql.se> Discussion: https://postgr.es/m/909A668B-06AD-47D1-B8EB-A164211AAD16@yesql.se Discussion: https://postgr.es/m/tencent_063F89FA72CCF2E48A0DF5338841988E9809@qq.com
Files
| Path | Change | +/− |
|---|---|---|
| configure | modified | +14 −18 |
| configure.ac | modified | +4 −8 |
| doc/src/sgml/installation.sgml | modified | +10 −2 |
| meson.build | modified | +3 −7 |
| src/include/pg_config.h.in | modified | +3 −3 |
| src/port/pg_strong_random.c | modified | +4 −10 |
Documentation touched
Discussion
- Add support to TLS 1.3 cipher suites and curves lists 2 messages · 2024-06-07
- Retire support for OpenSSL 1.1.1 due to raised API requirements 11 messages · 2024-09-09 → 2024-10-24